Markdown

Markdown as a reader sees it.

People and agents write to each other in markdown, so a transcript that shows **bold** shows characters nobody meant to write. Reading it is the job of this one place, on the JVM: the browser is handed prose that is already markup, which is what keeps a markdown parser out of the bundle and makes a server-rendered page and an element-rendered page the same page.

Everything the transcript wrote is escaped. Markdown's own syntax is the only thing that becomes markup, and two of its outcomes are refused:

• a link destination that would run code, which the renderer's own sanitizer drops
• an image, which would fetch bytes from somewhere else into the host's document. The card's rule is that an artifact is a reference and a media type, never bytes, so a markdown image is rendered as the reference it is.