Is the policy logic in the acl.go file?
Yeah, same, I gave up and moved over to khatru. You have to do everything in go, but it's a pretty good framework. You can look at https://github.com/coracle-social/triflector for how I'm using it
Is the policy logic in the acl.go file?
Mostly, yeah. There's stuff in main.go that calls out to acl when relevant