I think this is written to be "technically correct" as the graph traversal starts at the resource and attempts to follow relations/permissions until it finds the subject, but I'm not sure that matters from a high-level overview.