Content Boundaries

Public allowlist

The export step accepts only notes in the published folder with published: true.

Private blocklist is not enough

The pipeline uses an allowlist so accidental private folders are not exported.