In response to my comments, the next version of a spec I commented on
"drops the fixed depth limit and moves to a proper attenuation rule, where each delegation link must be a strict subset of its parent and can never broaden it, with cost control handed to the verifier rather than baked into the protocol."
It doesn't happen often.