The fact that AI cannot do this on it's own is the most concerning thing of all.

Agreed. But AI is still probabilistic. We see them as a strong signal but not the final authority. We believe that authorization should stay outside the model so it is deterministic and auditable. Similar to how AWS IAM works.