allowlist check: /try?model=NAME