Function decide 

pub fn decide<L>(
    rules: &HeaderAuthRules,
    verifiers: &RouteVerifiers,
    lookup: L,
) -> Option<GuardBlock>
where
    L: Fn(&str) -> Option<String>,

Carry a request’s header values through the required-headers check and then the authentication check, in the reference pipeline’s order.

lookup reads a header value case-insensitively by name (None when absent). Ok-shaped for future-proofing is not needed: the checks are total, so the return is a plain Option - None passes, Some(block) is the reference’s block answer.