Implementing Row-Level RBAC on Delta Lake with Trino & Open Policy Agent

tl;dr: A pragmatic way to put SQL-native access control in front of Databricks data without forcing every consumer into Spark