I've used OPA [1] before, which is very similar.

The whole point is to have language agnostic policy definitions. You write policies in the custom policy language, and every application that needs to do permission checks goes through the provided policy engine.

The programming language specific code just is some plumbing for accessing the policy agent.

So policies are inherently shareable.

[1] https://www.openpolicyagent.org/