Writing several model attributes from one input map, subject to an explicit allowlist or guard policy.