Colophon
How this site is built, and the checks it has to pass.
I built it from scratch in September 2026 and look after it like the software I ship at work. No change goes live before it passes the tests listed here, and the live checks run against the real site every hour.
- Certificate
- HSTS preload
- Security headers
- DNSSEC
- CAA
Checked on October 29, 2026 at 15:17, Prague time.
- Stack
- Next.js, React and TypeScript, built with Bun and hosted on Vercel. The words are set in Tanker, the rest in your system’s font.
- Tests
- Unit tests, then end-to-end tests in Chromium and WebKit, on desktop and on phones from 320px wide.
- Accessibility
- WCAG 2.2 AA, checked by axe in both themes on desktop and phone.
- Speed
- Lighthouse on a simulated slow phone: the largest paint within 3 s, layout shift under 0.02 and a size budget for every page.
- Security
- CodeQL reads the code and the workflows, and production dependencies may not carry a high or critical advisory.
- Every morning
- A wider check of every page, certificate, DNS record and expiry date emails me when anything fails.