Considering the already existing offerings, everyone is familiar with the

platform.service.action.*

permission logic, which is what we are attempting to implement within SpiceDB