Constant DISALLOWED_LIBRARY 

pub const DISALLOWED_LIBRARY: &str = "E2002";

The closure needs a library --allow-library does not name. The allow-list is a contract: a new native dependency fails the build instead of growing the image.