mirror of
https://github.com/netbirdio/netbird.git
synced 2026-08-24 16:41:30 +02:00
Invoke had grown a branch per API surface, each repeating the same found/unauthorised/unknown switch. Lift the shared denial arms into decide(), move the model-less endpoints into their own method, and name the two allow decorations (non-inference marking, Bedrock namespace stripping) so each surface reads as the one thing it does differently. No behaviour change.