AWS uses a SAT solver (Z3) to resolve permissions.

I can see miniKanren (or some other logic programming language) being helpful in the realm of authorization.