One pet's insurance packet (ITE-1177): its receipt for this bill plus the medical record (SOAP, discharge, labs with report PDFs, vaccinations, radiology reports) of each visit its charges came from, as one PDF. Reads are open under the permissions model (docs/permissions.md), like the invoice and pet-receipt PDFs — but this one carries medical records, so the caller must hold Patients, the permission the patient record export itself requires. Checked here rather than as an attribute so the receipt-only endpoints stay open to front-desk roles without it.