Ok, I think the ExperimentalComputablePermissions API is what I'm looking for. It appears to list the permissions for a given relationship. Is this API likely to be made stable anytime soon? i.e. not experimental?

yes, this will be happening soon, we are discussing prioritization of this work.