> don't allow

Is this "allow" or "encourage"? If "allow", how do you do that deterministically or at least fail-closed?