01
What was built
- Single PHP front controller for clean routing
- Private application/config layer outside public_html
- Reusable page-data and templates
- Responsive design system
- Canonical redirects
- Structured data
- CSP and browser security headers
- Stateless CSRF, rate limiting and SMTP-ready contact handling
- XML sitemap and robots controls
