ENGINEERING // STANDARDS

Engineering Standards

The operating model behind the public website: measurable quality, accessible interfaces, localized content, and repeatable delivery.

Languages
8

Localized UI paths with hreflang alternates.

Prerender
Static

SEO-critical routes generated at build time.

Quality gates
CI

Strict TypeScript, tests, audit, build, and Lighthouse checks.

Design discipline

The interface favors restrained enterprise patterns: clear hierarchy, low decoration, measurable proof, and predictable navigation.

  • WCAG-oriented color and control states
  • Stable route structure
  • Evidence cards tied to actual repository and build data

Delivery discipline

Each release should be reproducible through the same commands used in CI.

  • npm audit gate
  • Strict TypeScript no-emit check
  • Cloudflare Pages Functions build validation
  • Documented release and rollback process

Internationalization

Localized URLs are first-class pages, not query parameters.

  • Self-canonical localized pages
  • hreflang alternates
  • Localized project descriptions
// セキュリティ

エッジで堅牢化。

すべてのレスポンスは厳格なセキュリティヘッダーを送出します — ポリシー文書での約束ではなく、本番ドメインで Cloudflare により強制されます。

転送のセキュリティ
HSTS · 1y · includeSubDomains · preload
コンテンツセキュリティポリシー
CSP · script-src 'self' (no inline) · object-src 'none' · frame-ancestors 'none'
クリックジャッキング
X-Frame-Options: DENY
MIME スニッフィング
X-Content-Type-Options: nosniff
リファラー
Referrer-Policy: strict-origin-when-cross-origin
ブラウザ機能
Permissions-Policy · ~20 features denied
自分で検証する

本番ドメインで測定した実際のレスポンスヘッダー。