GEO draft: externalize-policy quickstarts for Spring Boot, NestJS, Django, Rails, Gin and .NET

[orweis]

Draft for Or / R&D review. Do not merge until reviewed. Part of the GEO/AEO docs answer-ready pass (plan: Action 1, geo-aeo-plan-2026-10-05). Opened by Content Bot on behalf of Or Weis.

Pages (URLs, slugs and sidebar labels unchanged; only frontmatter title and description change)

Retitled "Externalize authorization in so policy changes don't need a redeploy": quick-start/spring-boot, nest, django, rails, gin (title says Go Gin service), aspnet (title says .NET (C#)).

Each page: answer block (53 to 60 words), facts table (check location, SDK package and the version listed on sdk/sdks-overview, PDP, models, audit, free tier, open source), new section 6 "Change the policy without redeploying" (clear the create box for Author on Post, repeat John's request, expect 403 with no restart, then restore), FAQ.

• gin also gets "Go and policy as code": generated Rego or Cedar, custom policy through GitOps, neutral table of when to use Permit and when to run an engine yourself, plus an OPA/Cedar/OpenFGA/Permit FAQ.

Pricing facts and re-check

Free-tier values are copied from the live https://www.permit.io/pricing page (Community column of Compare Plans, labeled "Free Forever"), fetched 2026-10-05:
MAU 1000, Tenants 20, Authorization Queries No Limit, Environments 3, PDP Instances No Limit (also in the pages that say so: Roles 25, Resource Types 50, Logs Retention 14 days).

• TODO (reviewer): re-open the pricing page before merging and confirm these values still match. Each page has an MDX comment {/* GEO pass: ... */} next to the table naming the source and fetch date.

R&D, please double check

• Conflict risk: open PR Update the Python SDK docs for permit 3.0 and 3.1 #662 also edits quick-start/django.mdx (Python prerequisite). I did not touch prerequisites.
• The "Change the policy" steps rely on the Policy Editor checkbox described on each page. Please run it once in a live environment, especially the timing note ("updates reach a PDP in the background").
• aspnet uses HttpListener, not the ASP.NET Core pipeline (the page says so). The title says ".NET (C#)" to stay accurate. There is no ASP.NET Core middleware sample yet; consider adding one before claiming ASP.NET Core in the title.
• SDK versions in the facts tables come from sdk/sdks-overview.mdx (Python is not pinned there because Update the Python SDK docs for permit 3.0 and 3.1 #662 changes it).
• Go fit table is editorial. Please confirm the comparison wording.

Style and checks

• No em or en dashes, no curly quotes, no filler words in added text. Answer-first blocks are 40 to 70 words (counted).
• Existing technical content and existing code samples are unchanged. New content is added under the answer block, in new sections, or before the Next steps section.
• npm run build (redirect-lint, relative links, private paths, Docusaurus build, hyperlink anchors, routes check, sidebar coverage) passed on a temporary branch with all six GEO branches merged.
• Fit statements ("use X when / don't use X when") are editorial. Please confirm they are acceptable.

[netlify]

✅ Deploy Preview for permitio-docs ready!

Name	Link
🔨 Latest commit	108255a
🔍 Latest deploy log	https://app.netlify.com/projects/permitio-docs/deploys/6ac2cd6f0c34200008114f39
😎 Deploy Preview	https://deploy-preview-669--permitio-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.