Function decide 

pub fn decide(outcome: &MembershipOutcome, policy: &dyn OrgPolicy) -> PairAction

Map a membership outcome + the receiver’s policy to a pairing action.

Fail-closed: NoClaim / Rejected → Manual. Among the verified org_dids, the strongest opted-in treatment wins (Auto > Notify); orgs the receiver does not trust (inbound_mode → None) are ignored. The result never exceeds ORG_VERIFIED.