# Colophon — boussad.siamer.xyz

Architecture, performance, and security specifications for https://boussad.siamer.xyz.

## Philosophy
Zero JavaScript framework runtime overhead in production, zero telemetry, zero cookies, complete semantic HTML5 fidelity, and rich machine-readable metadata.

## Architecture
- Semantic HTML5 + responsive CSS with automatic dark/light theme switching.
- Node.js static generation pipeline (build.js) with clean URLs.
- Global Edge CDN hosting via Vercel with HTTP/2 and TLS 1.3.
- Global DNS managed on Cloudflare.
- Total payload: <65 KB uncompressed HTML/CSS.

## Security
- HSTS Preload: max-age=63072000; includeSubDomains; preload
- Content-Security-Policy (CSP): default-src 'self'
- Process Isolation: Cross-Origin-Opener-Policy and Cross-Origin-Resource-Policy
- Vulnerability Policy: RFC 9116 security.txt at /.well-known/security.txt

## Machine Readability
- RFC 9116 security.txt
- Answer.AI llms.txt & llms-full.txt manifests
- RSS 2.0 feed (/feed.xml)
- Schema.org JSON-LD (Person, ProfilePage, WebSite, FAQPage)
- Terminal CLI card via curl: curl -sL https://boussad.siamer.xyz/cli