allow
Grants only the listed custom actions to this surface: a document binding any other custom action fails at the gate with a SchemaViolation (rule "action-capability"). Built-in dollar actions are contract, not capabilities, and are always available.