{
  "name": "whitelist",
  "description": "Evaluates a lambda with a restricted whitelist of allowed slots",
  "signature": {
    "children": {
      "vocabulary": {
        "type": "lambda",
        "description": "Allowed slot names for the restricted evaluation scope",
        "required": true,
        "mode": "Value",
        "cardinality": "ExactlyOne",
        "role": "StructuredObject",
        "projection": "Children",
        "children": {
          "*": {
            "type": "string",
            "kind": "native-slot-name",
            "description": "Allowed native slot name (e.g. add, set-value, if) that the body is permitted to invoke",
            "required": true,
            "mode": "Value",
            "cardinality": "OneOrMore",
            "role": "DynamicMap",
            "projection": "Value"
          }
        }
      },
      ".lambda": {
        "type": "lambda",
        "description": "Executable lambda block",
        "required": true,
        "mode": "ExecutableLambda",
        "cardinality": "ExactlyOne",
        "role": "LambdaBlock",
        "evaluation": "EvalBlock",
        "projection": "Self"
      }
    },
    "scope": {
      "provides": "whitelist"
    },
    "output": {
      "mode": "Both",
      "kind": "lambda-result",
      "description": "Resolves to the evaluated lambda's value result and any returned child nodes"
    }
  }
}