Optional
the surface being validated (gates requiredInSurface + forbidInSurface).
var names whose ERRORS are downgraded to allowed (an explicit, auditable override).
called once per warning (e.g. console.warn) — assertEnv never throws on warnings.
the surface being validated (gates requiredInSurface + forbidInSurface).