My understanding is , max. no we will have to set up with create relationship, and during check will have to paas current state. If current state reaches 11, permission check shall return false