Index: src/services/guardianship/notes.js
===================================================================
--- src/services/guardianship/notes.js	(revision 6eab7e9673764601cadce6d5f98893e9a32f70a9)
+++ src/services/guardianship/notes.js	(revision e27b8db4e316874f7498fbe36e20270bc39b1d7f)
@@ -30,4 +30,17 @@
  */
 export function externalEmbedsAllowed(setting, isWard) {
+  if (setting === 0 || setting === 1) return setting === 1;
+  return !isWard;
+}
+
+/**
+ * May a player run INSIDE the app/page for this account? The heavier sibling
+ * of the setting above, and deliberately separate: seeing that a video exists
+ * is not the same decision as handing the screen to a third party's player,
+ * with its engine, its end-screen and its next-video machine. Same shape, same
+ * default (off for a ward), and it only ever matters once embeds are allowed:
+ * you cannot play what you may not see.
+ */
+export function externalPlaybackAllowed(setting, isWard) {
   if (setting === 0 || setting === 1) return setting === 1;
   return !isWard;
@@ -74,3 +87,3 @@
 }
 
-export default { helpRequestProps, isHelpRequest, waveProps, isWave, awayProps, hasGuardiansProps, objectHasGuardians, externalEmbedsAllowed };
+export default { helpRequestProps, isHelpRequest, waveProps, isWave, awayProps, hasGuardiansProps, objectHasGuardians, externalEmbedsAllowed, externalPlaybackAllowed };