leandragraf.work
The first client product built on the estate's own static-site generator, and the pattern this very site now reuses: a warehouse-style numbering scheme where every image's identifier is derived from its position in a tree — department, project, year, image — rather than stored anywhere. Reordering the tree in the editor renumbers everything by construction; there is no stale ID to chase and no gap a missed entry can leave behind.
Image protection here is the honest version, not the absolute one: raw originals never leave storage, the public site serves only converted, capped renditions behind short-lived signed links, and there is no public bucket policy at all. The frontend does not even use ordinary image elements — renditions render as background layers behind stable placeholder paths — a deterrent, not a claim that a screenshot has been made impossible.
An on-site editor gated to staff only, behind the same identity layer as the rest of the estate, lets the client's content be updated without a redeploy — the same /admin standard this site's own editor will carry once its content plane is provisioned.