Function extensions_permitted_at 

fn extensions_permitted_at(status: Option<u64>, extensions_len: u64) -> bool

Whether an Object at status is allowed to carry extensions_len bytes of extension headers.

Draft-16 Section 10.2.1.2: “Any Object with status Normal can have extension headers”, with a reference to Section 2.5 inside the sentence, and “If an endpoint receives extension headers on Objects with status that is not Normal, it MUST close the session with a PROTOCOL_VIOLATION.”

Draft-16 is the draft where the status set narrowed to Normal, End of Group and End of Track, so the rule reaches two codes rather than the single “Object Does Not Exist” earlier drafts name, draft-15 Section 10.2.1.1 among them. It reaches every carrier that can announce a status: an Object on a subgroup stream and a status datagram. An Object on a fetch stream carries no status field on this draft — Section 10.2.1.1 puts the field on subscription deliveries only — so it is the one carrier that cannot break the rule.

So this is false for exactly one shape: a non-empty extension block on an Object whose status is not Normal. An Object with no extensions is fine at any status, and an Object at Normal may carry any extensions.

status is taken as a raw code so the two subgroup readers can share this: one resolves the status into ObjectStatus and the other keeps the wire code. None means the Object carried a payload, which is Normal by definition and always permitted.

SubgroupObjectReader::read_object and SubgroupObjectReader::write_object refuse an Object this answers false for; SubgroupObjectReader::read_object_meta frames it.