The allowlist is the outermost safety boundary - a job absent from it is never touched, whatever fails - so it is worth reading at a glance rather than as a comma-separated setting value echoed verbatim. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>