Fuse membership and inheritance-based object (in the sense of 'any computing thing or person') ontology with configurability?

The insight in AD+GPO wasn't in either thing, but in the +. Each would be far less useful without the other.