The update_environment_variables structured IO control message now enforces an allowlist. Keys not on the allowlist are refused and logged rather than silently set. A debug message is emitted listing the rejected keys.
Evidence
Refusal log message (search for "[structuredIO] refused update_environment_variables for non-allowlisted keys:")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.