content-model

Schemas and the visibility contract — draft never leaks into public surfaces.

filterByVisibility is the single gate every surface passes through: portfolio pages, the console VFS, list.txt, and the leak audit alike.