[Garlef]

I don't know.

- The counter-examples seem strange to begin with since they mix presentation concerns (redirect) with data access concerns (getDocument) and authentication (user.isAdmin).

- I'd prefer an explation of the pattern that is not tied to a library. Kilpi already seems to abstract away something.

So it's a bit hard to understand what problem this pattern really solves.

Kilpi looks interesting, though.

(PS: the Kilpi.filter definitely needs a better explanation! What does it do? And how does it relate to the policies? I can make a guess what happens if what your query is fetching is a list of things. But what it it's not?)