The restriction of a policy's predicate, compiled on the access record's fields (fieldOf): none for a predicate that grants every aggregate, and nothing for one that grants none, neither reading an access record; otherwise the one ELEMENT_MATCH of the predicate on FIELD.