- potential to push policy execution pushdown to the db, such as for authing bulk oriented queries vs record level
- potential for use with RLS
- potential for analysis tools
In practice it seems boring, but in principle, interesting. I'd love to see actual staged compilation generation & integration (so no runtime service/runtime) and, for analysis, conversion to z3/SMT. We went for Casbin bc of the former, and seems a simpler leap for the latter.