pub const RENDER_NATIVE_ALLOWLIST: &[&str];Expand description
The only non-draft natives a template may call: read-only financial lookups,
pure value conversion, and the session-user-id accessor. Every entry is
verified read-only — no mutator, no config/secret reader, no auth surface.
convert-commodity only reads the prices table (verified: it issues
SELECT … prices …, never a write).