Trigger filter Native Change Account Updated

Can you try $[?(@.source.name == "Active Directory")] and use Compare step to check if the removed entitlement matches your target value? Also, this is a great resource: Native Change Detection Using Workflows