Is there a good way to log decisions depending on the outcome? For example, I want to log checkResource calls where the result is DENY but not APPROVE because it's a bit too noisy.

Not currently but that is a great feature request - shall add it to the repo

Sounds good!