Overview
This project hardened the portfolio (migrating to Next 15, React 19, next-intl 4) and
introduced a content pipeline so the site renders sanitized MDX from a single source of
truth instead of pulling long-form content directly from a CMS.
Highlights
- Security first. Closed every critical and high npm advisory by completing the
framework migration rather than patching around it.
- Default-deny publishing. A content adapter that only renders documents explicitly
marked as published, keeping private notes off the web by construction.
- Replicable. The frontmatter contract is documented so the same model can feed other
sites in the future.
Go deeper
Building the PublicBrain pipelineArchitecture, trust levels, and the Obsidian-to-Prismic publication flow.
Read the full story
Blog post on trust levels, default-deny MDX, and Prismic as the publication gateway.
