- every refused scheme and spacing renders as text; protocol-relative URLs are anchors, never site paths or active; rel only for _blank; active matching rules and same-host absolute URLs; the trail marks ancestors only - useMenuApi uses the server base with the forwarded visitor on the server and the public base in the browser