The policy check a result must pass — the same one find uses, so a search can never return a row a lookup would refuse.
find
final FutureOr<bool> Function(T record)? canSee;