This site. Built as an encyclopedia rather than a portfolio, because the reader arrives at one entry from a search engine and needs to reach everything adjacent to it from there.
Edges are declared once. A project names the technologies it used; a technology never names its projects. Every backlink panel, index, hierarchy and chart is inverted from those declarations at build time. Nothing is hand-maintained, so the two directions of a relationship cannot drift apart — which is the failure that makes a cross-reference worse than useless. Adding an entry is one file; the A–Z, the search index, the sitemap and all four charts follow on their own.
Schemas are enforced. Five collections with Zod schemas: a mistyped field, a year outside range, a summary over its limit or a domain outside the permitted set fails the build rather than producing a subtly wrong page.
Documents carry their own access policy in their storage path. PDFs attach to entries through an object store keyed <visibility>/<kind>/<slug>.pdf. The public route reads one prefix, the gated route the other, so the stored policy and the enforced policy cannot diverge — changing a document’s visibility moves the object and enforcement follows it. Identity is terminated at the network edge and forwarded as a verified header, so no password, hash or key exists in the repository at all. Restricted files answer 404 rather than 403: for a courthouse or dispatch design, the filename alone is information.
Two constraints shaped the whole thing. The domain carries production mail, so no option requiring a nameserver move was available — which is why the admin tool sits on a hostname the CDN actually serves rather than on the custom domain, where the protection would have been configured and inert. And the record has to outlive its host, so it is a folder of static files with no database and no runtime to patch.
Two pieces were built twice. A radar plotting technology by duration was a correct implementation of the wrong instrument — with most entries still in use, every arc ran to the rim and arc length merely restated the start year. It was replaced by an adoption curve and a hierarchy tree, which then showed something the circle structurally could not: sub-topics that began before the discipline they sit under was named.
A verification pass checks search, dead links, mobile overflow, and the count of marks each chart draws against the collection it draws from. That last check exists because a derived system fails quietly: a content change once violated an assumption a chart made and it rendered one entry twice — well-formed, correctly colored, and wrong in a way no one would catch by looking.
Outcome
A reference work that regenerates itself from plain text, and an access-controlled document store with no password anywhere in it.