#nightpoolyookoala: i'm not sure I see the usecase for a ACL type system--i'm mostly thinking of a notification type system for issues/PRs, and that's what I see the main usecase to be. (Although i'm also interested in learning more and open to other ideas)