Articles

Notes from production

Field notes on shipping AI you can trust — evals, RAG, agents, and the engineering discipline around them.

Cloudflare Pages + Wrangler: deploy & point the domain

Deploy to Cloudflare Pages from the terminal with Wrangler: a least-privilege token, the www + apex DNS, the apex→www 301, and keeping www the one canonical home.

CloudflareWranglerDeploy

How the /book Adopt-Assessment form works

A static site has no backend, so the /book lead form POSTs straight to Web3Forms. The flow, why the access key is public, the honeypot, and cookieless attribution.

FormsWeb3FormsServerless

Polish your UI with the Emil design-engineering skill

We ran Emil Kowalski's design-engineering skill over the site and added the micro-interaction it was missing — press feedback. The before/after, plus why we drew it in SVG, not Remotion.

UI/UXMotionDesign Systems

Get cited by AI search: entity corroboration, explained

What GEO is, why answer engines must corroborate your brand as a real entity, and the step-by-step setup: Wikidata, Crunchbase, Clutch, a bidirectional sameAs.

GEOSEOEntity

What happens when you type a URL

Type pangaea.id, press Enter — and a global relay starts: DNS, anycast, a TLS handshake, a static page from the edge. The whole trip, in plain English.

DNSNetworkingCloudflare

Point the domain at Cloudflare (DNS)

The technical walkthrough: move pangaea.id's nameservers from Hostinger to Cloudflare without dropping email — the steps, the records to carry, and the dig check.

DNSCloudflareEmail

CI/CD: GitHub Actions → Cloudflare Pages

The technical setup: GitHub Actions → Cloudflare Pages — the project, a least-privilege token, two secrets, and the one-push-to-main release (with the gotchas).

CI/CDGitHub ActionsCloudflare

Root → www: the 301 redirect

Pick one canonical address: we 301 the bare pangaea.id to www.pangaea.id so all SEO credit lands on one URL — the Cloudflare Redirect Rule, step by step.

SEOCloudflareRedirect

Fast, safe SSL & security on the edge

The free, layered Cloudflare security baseline — Always Use HTTPS, TLS Full strict, HSTS, CAA records that protect auto-renewal, strict CSP, WAF, Turnstile.

SSLSecurityCloudflare

DNSSEC: a tamper-proof seal on your DNS

Plain DNS trusts any answer — so it can be forged. DNSSEC signs every record and chains trust from the root to your domain. What it is, how forging works, and how to switch it on.

DNSSECDNSSecurity