this is pure blatant self-promotion on my end, but I think we built - at least directionally - what you’re asking for:

https://github.com/someengineering/cloudkeeper

I’ll reply more in depth since I’m on the run right now, but for now I hope the link is sufficient.