# FFI 操作员白名单 (v1.1 真沙箱)
# 格式: <库路径> : <符号1,符号2,...>
# 仅列出的库/符号可被脚本加载调用
# 脚本不可自行 ffi_enable() 绕过本白名单

msvcrt : strlen, _atoi64
samples/mylib.dll : cvm_add, cvm_sub, _atoi64
samples/httpsrv.dll : http_init, http_accept, http_recv, http_send, http_close, http_start, http_next, http_respond