if you want to implement something similar yourself, you'd want to write something that exposed the same gRPC API as SpiceDB, and then just does checks before passing the actual calls along to SpiceDB