Externalized authorization with Cerbos PlanResources API and Drizzle ORM. Generate efficient, policy-driven SQL filters from query plans. Avoid row-by-row checks, reduce database I/O, and enforce scalable access control at the query layer with @cerbos/orm-drizzle.