As per the document for HTTP2 - HTTP2 frames are grouped into transactions based on the stream identifier it it is not 0. For frames with stream identifier 0, whose effects are global for the connection, a transaction is created for each frame.
So, I guess each http request over http2 connection is considered as separate stream based on stream identifier. In case signature is matched against one stream, only that transaction (stream) verdict is set as per the rule action and other transactions (streams) are not. Is that correct understanding? I mean stream 1 matched against rule with action drop, only that stream is dropped and others are not.