Capability-linter config from [lint]. Controls the compile-time check that a node's pure_core / effect_shell bodies only reach the world through the declared-capability facade (see Bloccs.Node.EffectLint).

• enforce — true (default) makes an out-of-facade call a compile error; false (from effects = "off") downgrades it to a single loud warning so the node still compiles. A node that opts out is surfaced by tooling as an explicit "read this one" — the residual review stays visible.
• allow — extra module names ("My.Vetted.Lib") treated as permitted, for a surgical exception without turning enforcement off wholesale.