iscc · titusz · Sep 21, 2026 · Sep 21, 2026
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -4,12 +4,12 @@ repos:
     rev: v6.0.0
     hooks:
       - id: trailing-whitespace
-        exclude: ^docs/(?!license\.md$|\.isccignore$)|^zensical_iscc/assets/iscc/(fonts/|.*\.svg$)
+        exclude: ^docs/(?!license\.md$|\.isccignore$)|^zensical_iscc/assets/iscc/(fonts/|vendor/|.*\.svg$)
       - id: end-of-file-fixer
-        exclude: ^docs/(?!license\.md$|\.isccignore$)|^zensical_iscc/assets/iscc/(fonts/|.*\.svg$)
+        exclude: ^docs/(?!license\.md$|\.isccignore$)|^zensical_iscc/assets/iscc/(fonts/|vendor/|.*\.svg$)
       - id: mixed-line-ending
         args: [--fix=lf]
-        exclude: ^docs/(?!license\.md$|\.isccignore$)|^zensical_iscc/assets/iscc/(fonts/|.*\.svg$)
+        exclude: ^docs/(?!license\.md$|\.isccignore$)|^zensical_iscc/assets/iscc/(fonts/|vendor/|.*\.svg$)
       - id: check-yaml
       - id: check-json
       - id: check-toml

diff --git a/docs/images/cc-by-4.0.svg b/docs/images/cc-by-4.0.svg
diff --git a/docs/legacy/specification.md b/docs/legacy/specification.md
@@ -574,7 +574,7 @@ Outputs that are expected to be raw bytes are embedded as HEX encoded strings in
 
 Copyright © 2016 - 2020 The Authors, Content Blockchain Project
 
-<a rel="license" href="https://creativecommons.org/licenses/by/4.0/"><img alt="Creative Commons License" style="border-width:0" src="https://i.creativecommons.org/l/by/4.0/88x31.png" /></a><br />This work is licensed under a <a rel="license" href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 International License (CC BY 4.0)</a>.
+<a rel="license" href="https://creativecommons.org/licenses/by/4.0/"><img alt="Creative Commons License" class="off-glb" width="88" src="../images/cc-by-4.0.svg" /></a><br />This work is licensed under a <a rel="license" href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 International License (CC BY 4.0)</a>.
 
 
 *[CDC]: Content defined chunking

diff --git a/docs/license.md b/docs/license.md
@@ -7,7 +7,7 @@ icon: lucide/scale
 
 <!-- iscc-sum:start -->
 
-**Documentation source ISCC-SUM**: `ISCC:K4AEK2KP4ACMSSY4KV7ORSDHNCRSD5U367T2SQ2GX2SSMM3IPXR3Z4Y`
+**Documentation source ISCC-SUM**: `ISCC:K4AEK2KP4ACMSSY4KV7ORSDHNCRSD4FUCJVF7SLWOKJOAX5E2YC2OYI`
 
 This wide ISCC-SUM identifies the documentation source tree generated with
 `iscc-sum --tree docs`. The license page itself is excluded from the tree via
@@ -23,7 +23,7 @@ Copyright © 2016-2026 Titusz Pan and contributors.
 
 Published by the ISCC Foundation.
 
-<a rel="license" href="https://creativecommons.org/licenses/by/4.0/"><img alt="Creative Commons License" style="border-width:0" src="https://i.creativecommons.org/l/by/4.0/88x31.png" /></a><br />This work is licensed under a <a rel="license" href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 International License</a>.
+<a rel="license" href="https://creativecommons.org/licenses/by/4.0/"><img alt="Creative Commons License" class="off-glb" width="88" src="images/cc-by-4.0.svg" /></a><br />This work is licensed under a <a rel="license" href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 International License</a>.
 
 ## Source code license
 

diff --git a/zensical.toml b/zensical.toml
@@ -85,7 +85,9 @@ pygments_lang_class = true
 [project.markdown_extensions.pymdownx.superfences]
 custom_fences = [{ name = "mermaid", class = "mermaid" }]
 
-# GLightbox image lightbox. With auto = true (default), bare images are wrapped
+# GLightbox image lightbox. The zensical_iscc theme serves the library itself,
+# so the Zensical bundle does not fetch it from unpkg.com.
+# With auto = true (default), bare images are wrapped
 # in a lightbox anchor; images already inside a link are left untouched.
 # width sizes the lightbox overlay to most of the viewport; height stays "auto"
 # so wide images scale to the width without being cropped at the sides.

diff --git a/zensical_iscc/README.md b/zensical_iscc/README.md
@@ -20,6 +20,7 @@ and points `custom_dir` at it.
 | `assets/iscc/tokens/iscc.css` | Identity tokens, verbatim from the brand kit (`build/tokens/iscc.css`) |
 | `assets/iscc/theme.css` | Maps tokens onto Zensical variables and styles components |
 | `assets/iscc/fonts/` | Readex Pro and JetBrains Mono WOFF2 subsets with OFL notices |
+| `assets/iscc/vendor/glightbox/` | GLightbox 3.3.1 (MIT), loaded on pages with lightbox anchors so Zensical's bundle does not fetch it from unpkg.com |
 | `assets/iscc/logos/` | Signature and symbol SVGs from the brand kit |
 | `assets/iscc/favicon.svg`, `favicon.ico` | Favicon as on iscc.io: the near-black symbol with its coral circle on a transparent ground (copies of `../iscc-io/public/favicon.*`) |
 | `assets/iscc/apple-touch-icon.png` | App tile from the brand kit: white symbol, coral circle, near-black ground |
@@ -59,6 +60,23 @@ The theme sets `font = false` and serves the brand fonts itself. Do not set
 `theme.logo` or `theme.favicon` unless a site needs a different mark; the
 theme provides both.
 
+## Third-party requests
+
+Pages request nothing from other origins except Plausible analytics and, with
+chat enabled, iscc.ai. Fonts and GLightbox are served by the theme; Zensical's
+bundle would otherwise load GLightbox from unpkg.com, which privacy tools such
+as Privacy Badger flag as a tracker. Keep it that way when adding content:
+
+- Store images and badges under the site's `docs/` tree instead of hot-linking
+  them (the Creative Commons badge lives in `docs/images/cc-by-4.0.svg`).
+- The bundle still fetches Mermaid from unpkg.com when a page contains a
+  Mermaid diagram. No ISCC site uses one; vendor Mermaid the same way as
+  GLightbox before adding any.
+- GLightbox is loaded per page, keyed on lightbox anchors in the content.
+  Do not enable `navigation.instant`: the bundle would then reach a lightbox
+  page without a full load and fall back to unpkg.com.
+- The chat widget loads the fonts declared in iscc.ai's `public/theme.json`.
+
 "Copy page" and "View as Markdown" read `index.md` next to each rendered page.
 Generate those files after every build:
 

diff --git a/zensical_iscc/assets/iscc/vendor/glightbox/LICENSE.txt b/zensical_iscc/assets/iscc/vendor/glightbox/LICENSE.txt
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Biati Digital https://www.biati.digital
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.