def decide(request):
    try:
        return policy.evaluate(request)
    except Exception:
        return DENY   # fail closed, never fail open