1@README.md
2
3- **The invariants for these files are one folder up**, in
4  `apps/lmjtfy/CLAUDE.md`, which loads with this one.
5- **A visitor's comment on a vote (`/comment`) is never logged, echoed or put
6  in an event.** It goes from the request to `Ask::Comment` and into
7  `comments` as a bound value, and every error and event says only how it
8  ended (`Unsaid`). It is untrusted text: pages show it through maud's
9  escaping only, and the owner's backend must show it as text. `comments`
10  takes `INSERT` only, like `events`; read it through `vote_comments` and
11  `votes_commented`. The box's text lives in the `comment` signal, so do not
12  patch the textarea.