A smaller surface. A clearer boundary.

The site is static. Contact handling is isolated and validates requests before delivery. It does not execute submitted content, fetch submitted URLs or accept attachments.

The deployment configurations require encrypted transport for production, restrictive content-security policies and a separate monitoring surface. Transport must be verified after the chosen host is configured.

We do not claim security certifications. Security reports can use the contact form’s Technical question category once delivery is enabled; a dedicated reporting address will be added after owner confirmation. Please describe the issue without sending live credentials or personal data.