Function platform_defaults 

pub fn platform_defaults() -> Allowlist

Default read-only allowlist for the current platform.

“Read-only” is a descriptive label, not a guarantee — git log reads from .git, but technically cargo metadata may write to a target dir cache. The intent is to ship a useful exploration toolkit out of the box.