secure · fast
Notes on engineering, systems, and a bit of curiosity.
11 min read
How this blog deploys to Azure Static Web Apps with zero long-lived secrets on GitHub: workload identity, federated credentials, OIDC Discovery, the two-token dance, and trust boundaries.
4 min read
Pair the native View Transitions API with Astro Islands to land smooth cross-page motion and scoped interactivity — while keeping the zero-JS default and a sub-50 KB first-paint budget.
4 min read
Shipping script-src 'self' on Azure Static Web Apps: why per-request nonces are off the table, the Trusted Types / Pagefind trade-off, and pinning every header in staticwebapp.config.json.
3 min read
A tour of the stack behind this bilingual blog: Astro 5 Islands, zero-JS by default, Tailwind v4 CSS-first, and why I picked Astro over Next.js or a plain static generator.