Validated public records
Before export, the pipeline parses every research record through its schema, rejects duplicate slugs, and checks public citations for HTTPS URLs that are not localhost. Public PDF paths are constrained to the research download namespace.
The export projects only stable public fields into a versioned index. Internal rendering details do not become accidental API surface, and canonical publication URLs are rooted at the configured MLAI origin.