01
Strict by default
Scripts, styles, connections, framing, forms, and objects are governed by an explicit CSP.
Independent delivery surface
A quiet test for software that must travel well.
This page intentionally has its own framework, security policy, and release cycle. Embedded software has to work here without asking the host to move out of its way.
02
Framework-owned
Pico CSS controls the host surface. No selector is tailored to the embedded component.
03
Rebuildable
The site is rebuilt from source and republished without manually repairing its integration.
The host remains the host.
The component owns its compatibility, release integrity, verification, and rollback.