1. One or more computer-readable storage media comprising computer-executable instructions to perform a method of facilitating access to a resource, the method comprising: creating a first answer set that comprises a first assertion, a first variable, and a first constraint that have been chosen, said first answer set satisfying one or more conditions comprising: that a first set of assertions that comprises or is derived from said first answer set will, when presented to a guard that controls access to the resource, cause said guard to find that a query evaluates to true under a policy implemented by said guard; creating a second answer set that comprises a second assertion, a second variable, and a second constraint that have been chosen, said second answer set satisfying one or more conditions comprising: that a second set of assertions that comprises or is derived from said second answer set will, when presented to said guard, cause said guard to find that said query evaluates to true under said policy; determining that said first answer set is not subsumed by said second answer set; and providing a solution that comprises said first answer set.
1. One or more computer-readable storage media comprising computer-executable instructions to perform a method of facilitating access to a resource, the method comprising: creating a first answer set that comprises a first assertion, a first variable, and a first constraint that have been chosen, said first answer set satisfying one or more conditions comprising: that a first set of assertions that comprises or is derived from said first answer set will, when presented to a guard that controls access to the resource, cause said guard to find that a query evaluates to true under a policy implemented by said guard; creating a second answer set that comprises a second assertion, a second variable, and a second constraint that have been chosen, said second answer set satisfying one or more conditions comprising: that a second set of assertions that comprises or is derived from said second answer set will, when presented to said guard, cause said guard to find that said query evaluates to true under said policy; determining that said first answer set is not subsumed by said second answer set; and providing a solution that comprises said first answer set. 5. The one or more computer-readable storage media of claim 1 , wherein said first answer set comprises a third set of one or more constraints that comprise said first constraint, wherein said second answer set comprises fourth set of one or more constraints that comprise said second constraint, wherein said third set involves a first collection of one or more variables that comprise said first variable, wherein said fourth set involves a second collection of one or more variables that comprise said second variable, and wherein said determining comprises: determining whether there is a substitution under which: set third set, satisfies a constraint-subsumption condition with respect to set fourth set, with said second collection of one or more variables substituted according to said substitution.