pub fn model_allowed(rules: &GateRules, model: &str) -> bool
Whether the requested model passes the ceiling. An empty allowlist means “no restriction”.