While not talked about on HN as much, the big corps doing monorepo use something like Perforce which has "protects" tables allowing very granular access control