trevato/atelier
Public: anyone can read this; the crew can change it.
A design studio's website with an in-app editor: a home page, a work gallery with case-study pages, an about page and a contact form; the studio edits every page's text and uploads images from a password-protected /admin (one admin account set at first run), images are resized on upload and served with long cache headers, motion respects prefers-reduced-motion, and Lighthouse is 100 across the board.
Findings
Every push is scanned for secrets and advisories; each night adds static analysis. An open high finding holds a release until a person accepts it.Last push scan never · last nightly scan