like the syntax i started reaching for was

role#permission_set#permission->read_site

, with the idea that the # is "walking" those relations