Function is_readable 

pub fn is_readable(scope: &ReadScope, owner: &OwnerAudience) -> bool

Pure, offline-testable: the whole authorization rule, with no I/O in it. ReadScope::All is the only branch that passes Unknown – every other combination denies it unconditionally.