Function push_delivery_is_authorized 

fn push_delivery_is_authorized(
    subscriber: &PushSubscriber,
    key_store: &KeyStore,
    filter_registry: &FilterRegistry,
    decode_result: &TradePushDecode,
    event_type: &'static str,
    push_acc_id: Option<u64>,
    push_trd_market_str: Option<&'static str>,
    proto_id: u32,
) -> bool

Single authorization admission shared by legacy logging and modern resource delivery. A caller must pass this function before either target is created, so decode-failed restricted trade bodies and current scope revocations can never enter a modern queue.