Level validation does not check hasTag or getTag

[john-h-kastner-aws]

Before opening, please confirm:

• I have searched for duplicate or closed issues.
• I have read the guide for submitting bug reports.
• I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.

Bug Category

Schemas and Validation

Describe the bug

This policy validates at level 0, but it required dereferencing principal, so it should only validate at a level greater than or equal to 1

permit(principal, action, resource) when { principal.hasTag("foo") };

Expected behavior

.

Reproduction steps

.

Code Snippet

// Put your code below this line.

Log output

// Put your output below this line

Additional configuration

No response

Operating System

No response

Additional information and screenshots

No response