A rest argument keeps an empty first element; a removal block keeps its neighbour; the Markdown converter reads paragraphs whole; Smart App Control on the Windows page (from dev 1083db946f05)

- A rest argument (a list's or a table's items) now strips exactly ONE
  leading bar -- the separator from what precedes it -- so a second one is
  an empty first element: a table with an empty header corner is written
  `@table |` then ` | Maskulinum | ...`. Before, every leading bar was
  dropped and such a header row shifted one column left. New shipped suite
  tst/rest_test.sh.
- Text written hard against a closing ]# (a period, a letter) is no longer
  removed with the block; a following space or line break still is.
- sks/tns/md_to_sks.py converts inline Markdown per paragraph, so emphasis
  that wraps is converted and not mis-paired; bold may contain italic;
  tables are unnumbered; links to sibling .md files converted alongside
  become links to their html pages; the arrow becomes @rightarrow@.
- doc/install/windows_source_install.md: Smart App Control must be off --
  it blocks MSYS2's unsigned toolchain, and its Evaluation state turns
  itself on later.

doc/install/windows_source_install.md

@@ -28,6 +28,24 @@ special rights. Allow an hour or two the first time: the downloads are
 about a gigabyte in all, TeX Live alone takes twenty to thirty minutes,
 and the build a few minutes. Nothing here needs to be done twice.
 
+**Smart App Control must be off.** A clean installation of Windows 11
+runs Smart App Control, a security feature that blocks any program
+Microsoft has not seen signed and widespread — and the MSYS2 compiler,
+`make` and the `bash` shell on which this page depends are not signed, so
+with it on the MSYS2 shell does not open and the build cannot start
+("An Application Control policy has blocked this file"). Check it first:
+Windows Security ￫ **App & browser control** ￫ **Smart App Control
+settings**. It is in one of three states. *Off* is what you need. *On*
+blocks MSYS2; switch it off. *Evaluation* lets everything run for now,
+but Windows turns it on by itself when it decides the machine is used
+"safely", at which point a working installation stops without warning —
+so switch it off at once rather than wait. Switching it off cannot be
+undone short of reinstalling Windows, which is why Microsoft asks you to
+confirm; the rest of Windows Security (Defender, SmartScreen for
+downloads) stays on and is not affected. A machine upgraded from Windows
+10, or one on which an unsigned program has already been installed, has
+it off already.
+
 
 ## Prerequisites
 
@@ -403,6 +421,11 @@ it (a new UCRT64 shell does, once the line is in `~/.bashrc`) and run
 `MSYS2_PATH_TYPE` is not set to `inherit`, or the shell was opened before
 you set it. Set it and open a new UCRT64 shell.
 
+**"An Application Control policy has blocked this file", or the MSYS2
+shell does not open.** Smart App Control is on; see *Before you start*.
+It can turn itself on after the installation, in which case the
+installation is intact and only the setting needs changing.
+
 **The build is slow.** Windows Defender scans every file the compiler
 writes. Excluding the repository folder from real-time scanning speeds the
 build up considerably; it is not required.