caveat check_amount(amount int, allowed_amount int) {
  amount <= allowed_amount
}

definition transfer {
  relation creator: user with check_amount
}