The LP-5 vocabulary allowlist (pure). Accept a forwarded marker ONLY if its name
is in the vocabulary AND every attribute key is in that marker's schema. An
unknown name — or a defined name carrying an out-of-schema attribute key — is
DROPPED (returns null), never recorded. This is the gate against an untrusted
sandbox minting arbitrary names/values into the host timeline (an injection
surface for dashboards / the deferred RUM endpoint). Sub-marks inherit their
aggregate's schema.
The LP-5 vocabulary allowlist (pure). Accept a forwarded marker ONLY if its name is in the vocabulary AND every attribute key is in that marker's schema. An unknown name — or a defined name carrying an out-of-schema attribute key — is DROPPED (returns
null), never recorded. This is the gate against an untrusted sandbox minting arbitrary names/values into the host timeline (an injection surface for dashboards / the deferred RUM endpoint). Sub-marks inherit their aggregate's schema.