Leopard is a denormalization between nested groups where you can always resolve membership in a parent group with a constant number of steps. There’s a section on it in the Zanzibar paper: https://zanzibar.tech/