Such assertion is already provided by
slapos_assert_hosting_subscription_predecessor alarm.

The category table does not index any non strict link to the computer. It is
not possible in such case to directly use the uid value.

No need to access the host software instance to correctly filter.

role provides no group.