Class VectorSearchProvider

Whether this provider applies each entity lane's rendered ExtraFilter itself, in the RunView that reads the entity — so the engine need not re-check its hits against that lane bound. Only EntitySearchProvider sets it. Every other provider's hits for an entity with a lane ExtraFilter are re-checked by the engine, as the user, with PK IN (...) AND (<ExtraFilter>).

Like ResultsAreRowsOfLabelledEntity, it is read from the provider the engine stamped on the result (ProviderId), never from a label, and never covers a promoted content-item hit (the filter was applied to the content item, not to the origin record it now names). A subclass inherits it; a subclass that changes Search so the lane ExtraFilter is no longer applied must override it to false.

Whether every result this provider returns is a row of the MJ entity its EntityName names, with RecordID that row's primary key, read from that entity through RunView as the searching user — so the entity's permissions and the user's row filters were applied when the row was read.

The engine's permission pass trusts such results without re-reading them when no row filter applies (the hot path of the entity and full-text lanes). It verifies every other result with one PK IN (...) read per labelled entity, because a vector or external-index hit's EntityName is whatever the index says (an index or collection name, a metadata key) and its RecordID is the document's own id.

Trust follows the provider instance the engine stamped on the result (SearchResultItem.ProviderId), never the SourceType a provider declares or stamps: SearchSource is a closed union, so any provider can call itself 'entity' or 'fulltext'. EntitySearchProvider and FullTextSearchProvider set this. Leave it false (the default) unless your hits really come out of RunView against the labelled entity; set on any other provider, it lets whoever writes the index choose which entity's permissions apply. It never covers a hit the engine promoted from MJ: Content Items to its origin record (SearchResultItem.PromotedFromContentItemID): the provider never read that row.

A subclass inherits this flag. A subclass that changes Search so its hits no longer come out of RunView against the labelled entity must override it to false.