pub fn is_allow(d: &DecideResponse) -> bool
Convenience: decision string is “allow” (case-insensitive).