Temporary allowlist fixes a false positive but breaks the trust boundary by matching a broader source range than intended

A fast incident fix restores service, yet the allowlist rule now covers far more source space than the team originally intended to trust.