How, if at all, can we achieve federated roles with permissions?

I’m not sure if roles should be federated, but permissions definitely should be and there’s a growing amount of different proposals and implementations. For example, reply permissions: FEP-5624: Per-object reply control policies