Disclaimer: I am the co-founder of Cerbos.
Thanks for explaining the problem space so well and referring to Cerbos[1] as contextual solution.
We had to build these systems in the past so many times and we were tired of reinventing the wheel. With Cerbos we aim to turn this problem space into configuration rather than code and enable enterprise-grade access management for any application.