VLAN Filter - how do ingress and egress rules work?

Not really. What you’re missing is that bridge has two or three personalities (depends how you count). When you consider those personalities separately, you don’t have to change your explanation.
This topic explains bridge and its personalities nicely.