AllowList narrows which addresses pass the email gate. An entry may be a full address, an "@domain.com" suffix, or a bare "domain.com". An EMPTY list admits everyone.
List<String> allowList;