Access policy evaluation

Evaluates a policy written in a readable subset of Rego against a supplied input document: package, default, complete rules with a body, partial deny[msg] rules, not, comparisons, counters, prefix and containment checks, := assignments and wildcard indexing. It reports the decision, which rules fired and the reasons for any denial.