The guard only pretends to validate uniforms at the door.
Look closely at how the decision is made on the client.
Inspect the page source/JS. The valid pair is hardcoded; no server call needed.