const UNSAFE_FUNCTIONS: &[&str];
Functions whose semantics depend on call order or thread-local state. A per_point block calling any of these cannot be safely sample-parallelised.