hmm... i suppose one way of approaching it is saying that a rebac system is essentially a cache over the existing data model of the system, and in order for a cache to work well you need to know when to invalidate it, which involves the system querying the cache having some notion of the cache state.