genuine.dev — the site you're reading

Auth is a signed JWT validated per request — there's no session store to run, back up, or scale. A release build refuses to start without an explicit signing secret.

The single-owner admin's password is hashed with argon2, not a faster general-purpose hash — deliberately expensive to slow down offline brute-force if the hash ever leaked. The owner can rotate it from the admin settings UI without touching the database directly.

A release build restricts CORS to the configured site origin — the API doesn't answer cross-origin requests from anywhere else.

Theme, fonts, brand text, logo/favicon, and social links all live in `site_settings`, not a browser's localStorage — the owner sets them once from the admin UI and every visitor sees the same thing, applied before first paint via a blocking inline boot script.

Default, Nord, Gruvbox, Rosé Pine, Catppuccin, One, and Ayu, each with dark and light variants selected by the family's `mode` (light/dark/auto). Custom owner-defined palettes derive a full ~20-variable theme from four input colors and store alongside the built-ins.

A topic's color is its identity — how a reader recognizes "this is a security post" across every list and badge — so it stays constant across themes rather than shifting with the active palette.

Nerd Font icon glyphs are subsetted and self-hosted per coding font rather than pulled from a CDN — the public site loads only the two fonts actually in use, while the admin settings page loads the full catalog once for live preview across every option.

`directive::parse` walks the document once, recursively, into a tree of `Block { name, arg, body, children }`. The parser never fails outright — a malformed directive still renders best-effort with a line-accurate diagnostic instead of silently dropping content.

Syntect tokenizes each line into CSS classes, not literal color values baked into `style=` attributes — code blocks follow the active theme and light/dark mode like the rest of the page.

The `:::diagram` directive passes raw SVG through unescaped — authors use `var(--acc)`, `var(--blue)`, and friends directly in `fill`/`stroke` attributes, so an architecture or ER diagram re-colors with the visitor's theme instead of staying a fixed palette baked in at authoring time.

The entire site is authored from a browser admin — no local markdown files, no git push to publish. Postgres is the single source of truth; the WYSIWYG editor round-trips to markdown so the same renderer produces the final HTML for every save.

Each admin save snapshots the previous version into `document_revisions` before writing the new one — the editor can browse, diff, and restore any past revision without a separate versioning system.

Every upload is recorded in `media` — original filename, MIME type, byte size — even though the stored file itself sits under a random UUID name on disk. The library can always answer "what was this?" without touching the filesystem.