Nothing leaves the browser. Parsing happens here, and a share link carries the spec in the URL fragment — the part a browser never sends to a server.

Refs are followed. $ref into #/components resolves inline; external files don’t.