pub fn visibility(audience: i32, label: &str) -> Result<VisibilityTier, Error>
Native audiences map exactly to canonical tiers. An omitted audience must never silently turn a private record into public data.