Formal documentation of whitelist function