// uptime
The site is the receipt.
This page exists because the home page promises "the medium is the message." If a site claims platform-engineering rigor, it should be able to show its build. This is that page.
build
────────────────────────────────────────────────────────────────
content-security-policy
────────────────────────────────────────────────────────────────
Active directives on every response (see public/_headers):
- default-src 'self'
- style-src 'self' (no 'unsafe-inline')
- font-src 'self' (no third-party CDNs)
- script-src 'self'
- img-src 'self' data:
- frame-ancestors 'none'
- object-src 'none'
- base-uri 'self'
No 'unsafe-inline' on style-src. No fonts.googleapis.com or fonts.gstatic.com. No third-party JS. Strict HSTS + COOP + Permissions-Policy headers also set.
stack
────────────────────────────────────────────────────────────────
| Framework | Astro 4.x | static SSG |
|---|---|---|
| Language | TypeScript | strict mode + noUnusedLocals/Parameters |
| Styles | CSS custom properties | external bundles only · no inline <style> |
| Fonts | Inter + JetBrains Mono | @fontsource self-hosted Latin subset |
| Hosting | Cloudflare Pages | project: anilardic |
| CI/CD | wrangler pages deploy | preview branches per commit |
| Analytics | Cloudflare Web Analytics | zero-cookie, beacon-only |
rigor checklist
────────────────────────────────────────────────────────────────
- ✓ Strict TypeScript (no implicit any, no unused locals)
- ✓ Strict CSP (no inline anything, no third-party origins)
- ✓ SBOM-ready dependency tree (
npm ls --json) - ✓ Reduced-motion fallbacks on all transitions
- ✓ WCAG AA contrast on all text tokens
- ~ Lighthouse perf ≥95 / a11y =100 (cycle 11 measure on preview)
- ~ axe-core zero criticals (cycle 11)