you'll likely need to write "inverse" relationships for this to function. for your first example:

definition org {
  relation child: org
  relation member: user

  permission is_member = member + child->is_member
}

would have

is_member

return for the member of the org or any of its child orgs