Personally I prefer cuelang operating on JSON (aka IAM policy, kafka ACLs, IP blocklists, elasticsearch database config etc.) documents - cuelang-js is a wasm e

Personally I prefer cuelang operating on JSON (aka IAM policy, kafka ACLs, IP blocklists, elasticsearch database config etc.) documents - cuelang-js is a wasm execution engine I can use with the cue binary across most apps/databases/kafka etc to have a unified policy engine. The advantage here is that I can then simulate end-to-end policy what-ifs, and do build-time policy unit tests. I can also handle business rules in a similar fashion for better visibility - how much of the business understands python/Go/Java/etc code?