Bytecode allowance verifier (ASM) with policy caching, build-time lambda verification, and shipped policies for common Kotlin libraries