// Reads as delegation-depth (depth > 2), validates, and is not the same policy.
@id("delegation-depth-plus-one")
forbid (principal, action, resource)
when { context.depth + 1 > 3 };