I don't know. - The counter-examples seem strange to begin with since they mix presentation concerns (redirect) with data access concerns (getDocument) and aut

I don't know. - The counter-examples seem strange to begin with since they mix presentation concerns (redirect) with data access concerns (getDocument) and authentication (user.isAdmin). - I'd prefer an explation of the pattern that is not tied to a library. Kilpi already seems to abstract away something. So it's a bit hard to understand what problem this pattern really solves. Kilpi looks interesting, though. (PS: the Kilpi.filter definitely needs a better explanation! What does it do? And how does it relate to the policies? I can make a guess what happens if what your query is fetching is a list of things. But what it it's not?)