the leakage-guard configuration (deny-list + dominance threshold)
Whether a field is allowed into the feature matrix (i.e. NOT deny-listed).
candidate column/feature name
Whether a source binding is allowed to be drawn from (i.e. NOT deny-listed).
the source's Ref (entity name / Query id / etc.)
Partitions a list of candidate column names into allowed vs denied — handy
for the executor's select step, which filters deny-listed columns out of
the matrix before producing values.
candidate column names
{ allowed, denied } partition
Assembly-time deny-list enforcer. Normalizes the guard's
DenyFields/DenySourcesinto case-insensitive sets and answers "is this field/source allowed into the matrix?".