pub const ALLOWED_ACTIONS: &[&str];
Whitelisted values for action_proposed. Keeping this hard-coded server- side means a hostile client cannot inject free-form action strings into audit-grade rows.
action_proposed