One can sort of get there today combining something like attribute based access control, signed bearer tokens with attributes, and some sort of a degrees-of-del

One can sort of get there today combining something like attribute based access control, signed bearer tokens with attributes, and some sort of a degrees-of-delegability limiter that a bearer can pass along like a packet TTL. Did you want it in rust? - https://github.com/eclipse-biscuit/biscuit-rust https://github.com/eclipse-biscuit/biscuit-rust - https://www.biscuitsec.org/ https://www.biscuitsec.org/