Lenient decode: missing values fall through to REPLACE (the spec default at the root).
Strict decode for the inherit-from-parent path; null when absent or unrecognised.