← Back to Portfolio

Colophon

Architecture, engineering, and standards for this site

Philosophy

This website is built with a minimalist systems mindset: zero heavy frontend frameworks, zero telemetry or tracking scripts, zero cookies, and complete semantic fidelity. It aims to load instantly across any network connection worldwide while exposing rich machine-readable metadata for automated agents, web crawlers, and terminals.

Architecture & Hosting

  • HTML / CSS: Semantic HTML5 with system font stack fallback (Inter) and native CSS custom properties for dark/light mode switches based on user OS preference.
  • Build Pipeline: A lightweight Node.js static generator (build.js) that compiles templates, computes build timestamps, copies assets, and prepares universal clean URLs.
  • Hosting: Deployed on the Vercel Global Edge Network with sub-millisecond edge cache hits (HTTP/2, TLS 1.3).
  • DNS: Managed globally on Cloudflare.
  • Total Payload: Under 65 KB uncompressed HTML and minimal CSS.

Security Headers & Hardening

  • Strict-Transport-Security: 2-year HSTS max-age with includeSubDomains and preload.
  • Content-Security-Policy (CSP): Restricted default-src 'self' with locked down font/style sources and disabled frame embedding.
  • Process Isolation: Cross-Origin-Opener-Policy: same-origin and Cross-Origin-Resource-Policy: same-origin.
  • Permissions-Policy: Disabling camera, microphone, geolocation, payment, and invasive browser topics.

Protocols & Machine Readability

  • RFC 9116 Security: /.well-known/security.txt declaring vulnerability disclosure policies and OpenPGP encryption key.
  • LLM Manifests: /llms.txt and /llms-full.txt following the Answer.AI llms.txt standard.
  • Syndication: RSS 2.0 feed at /feed.xml.
  • Structured Data: Full Schema.org JSON-LD definitions (Person, ProfilePage, WebSite, FAQPage).
  • Terminal Mode: Run curl -sL https://boussad.siamer.xyz or curl -sL https://boussad.siamer.xyz/cli to view the terminal ANSI resume.