"Which authorization engine should I use" always gets answered with a table. Cedar is analyzable, Rego is expressive, Zanzibar is relationship-based. I could never feel the difference from any of it. So I gave four of them the same rules and ran every possible request through all four at once. Live demo: https://0-draft.github.io/authz-playground/ Repo: 0-draft/authz-playground One square is one request, one row per engine, filled means allowed. Pink is where th...