Notes
Engineering notes.
Writeups on things we actually built and things that actually broke. No tutorials rewritten from documentation — only work we did and what it taught us.
A Content Security Policy that broke our own logo
We shipped a strict CSP, scored well on every header scanner, and quietly broke the site's own logo. Here is what inline style attributes do under CSP, and why a passing scan is not proof.
Read →Building right-to-left first, not translated into it
Mirroring a left-to-right layout produces a Persian site that technically works and reads as foreign. What actually has to change when the reading order flips.
Read →Hosting a model instead of renting an API
Commercial AI APIs are not reachable from where we build. That constraint decided Sevoria's architecture, and some of the results were better than the default would have been.
Read →