1 One file per document
CSS, SVG, and the console runtime are inlined. No CDN, fonts, or remote images are loaded.
2 Deterministic output
Identical model and theme produce identical bytes, including generated SVG ids, graph layout, and derived palette values.
3 Curated styling
meta.style only accepts known palettes, type pairings, densities, and figure treatments. Accent colors are contrast corrected. No arbitrary CSS is injected.
4 Escaped content
Document text is HTML escaped. Only http(s), mailto:, #, and relative URLs survive as links.
5 Print ready
Paper themes ship @page rules and keep figures, tables, algorithms, and callouts unbroken across pages. Figure motion freezes to its final frame in print and under reduced-motion preferences.
6 Known limits
PDF ingestion depends on the optional unpdf package and reports a typed error when it is unavailable. There is no visual regression suite and no per-theme versioning.