1. it means you should point the arrow to a permission, not a relation, because if you then need to later change the implementation of that computation, it is easy to do in a permission (and not easy to do in a relation)