;; Default membrane: unconditional pass-through.
;; Custom membranes override this with security checks, tracing, etc.
;; Variables in scope: op (string), payload (JSON string), sender (string), meta (JSON string)
(effect membrane.allow op payload)
