I think this may be the route I'm looking for, but I guess it's my understanding of how portals filter. In my mind, it's an additive/subtractive process. So above... Table 1 to 2 filters to keep only active individuals, and then 2 to 5 takes only active individuals and further filters to only retain attackers. But this is not how it seems to behave, 2 to 5 takes all records and keeps attackers, regardless if they are active or not.
So if I' thinking through this properly, my filtering process must be done via one relationship - one step, instead of the two steps I'm using - and then any grandchildren from there need just be to look up related records on a one-to-one relationship?