> Well, they're really just predicates. Yeah, both policy requirement rules and attribute rules are Predicate<AttributeFilterContext>. The policy requirement rule is simply the first applied. A simple enough pattern.