- every raw statement naming either table in a sanctioned function must
be exactly that function's expected-table probe (cross-table inserts
rejected); per-function count still enforces exactly one
- bare Name('raises') is trusted only when the file imports it from
pytest (from pytest import ... raises); other import bindings
rejected