# Rule to enforce data deletion (right to be forgotten)
allow_deletion {
  input.action.type == "delete"
  input.resource.owner == input.subject.id
}