- Fence logic is now hand-duplicated in 3 places (cfdoc_linkresolver.applyLinkMap, cfdoc_references_resolver.process, cfdoc_macros.prune_include_lines) with slight variations. It's correct in each, but it's the kind of thing that drifts. A small shared generator (for line, in_pre 
  in iter_fence_state(lines)) would de-risk future edits. Non-blocking.
  - Ambiguous titles resolve silently to whichever page parsed last. There are two pages titled Installing CFEngine and two titled Promises. load_references builds a dict keyed by lowercased ref, so the last-appended URL wins with no warning. The applyLinkMap path does emit a
  "Multiple link targets" warning for backtick autolinks, but the [text][ref] path doesn't. Since this PR is specifically about making link resolution trustworthy, it'd be a natural place to also warn on duplicate-title collisions — though it's a pre-existing quirk, fine to defer.
  - build-locally.sh clones over SSH (git@github.com:). Contributors without GitHub SSH keys will fail at step 1. An HTTPS fallback (or a one-line note in the header comment) would help. The --exclude='/tmp/' to stop rsync recursing into its own output dir is a nice catch.
  - Minor comment nit: _no_links.md's header says "Lines starting with <!--/blank lines are ignored," but the parser actually strips full <!-- ... --> blocks via re.DOTALL — i.e. it's more robust than documented. Trivial.