Notes, references, and how-I-think pieces.
A quick reference on the GCP IAM pieces that actually decide who can do what — bindings, conditions, and the permissions worth watching.