thankfully standing on top of CEL instead of some home-grown something: https://docs.cerbos.dev/cerbos/0.31.0/policies/conditions and Apache 2 https://github.com/cerbos/cerbos/blob/v0.31.0/LICENSE