Function render_brief 

pub fn render_brief(entries: &[BriefEntry], nonce: &str) -> String

Render the fenced brief. Empty entries -> empty string (zero bytes -> no injection). Leads with low-free-text fields (date, tool, touched files); the title is the one free-text field, sanitized and capped. nonce makes the envelope unforgeable.