We have an authz implementation which is split up as the API and the engine.
The API supports two ways of specifying the authorization policy: as a static string, or as a file to watch. The second method supports online updates to the policy.
We should have examples which illustrates the use of both.
Existing tests can serve as good starting point to understand the usage of the API.