Guard / API
foldkit-guard/drizzle
A guard set's read rules as foldkit-remote-drizzle bindings' visible:
each principal guard decided, what is left compiled to SQL over the table,
and an inherited Read a subquery over the related table's own rule.