After a lot of testing I have a gut feeling like there's some bugginess related to using the following type of indirection:

relation a: a
permission b = a->b
permission c = b

Sometimes I'll get false negatives on the

c

permission. When I do

zed permission expand

, c will expand to b and then a->b but won't pick up any of the subjects in a->b. But when I expand

a->b

directly those subjects are there. It seems to be intermittent and inconsistent, and when it does happen, a restart of spicedb or a rewrite of the zedfile seems to clear up the issue.