It seems like you are using a the rule-specific allow list [rules.allowlist] instead of the global allowlist [allowlist].
[rules.allowlist]
[allowlist]