What decides who can read a blueprint or folium: status first, then visibility, capped by organisation policy.