Permit, Forbid, and the Art of Defensive Depth

Part 3 of the Cedar Series: why I write explicit forbid rules even when default-deny makes them redundant, and what that buys me in formal verification.