---
uai: "1.0"
type: architecture
status: active
project: iarpg.com
updated_utc: "2026-07-19T13:58:51Z"
---
# Site and Memory Architecture
## Runtime

- PHP 8.1+
- Vanilla JavaScript
- Local CSS, fonts, and image assets only
- Apache or LiteSpeed rewrite support
- No database, Composer, npm, CDN, analytics, or third-party runtime dependency

## Flat document root

`index.php`, `.htaccess`, public pages, `assets/`, `api/`, `app/`, `docs/`, `.uai/`, `.well-known/`, `totem.uai`, and `taboo.uai` belong directly in the assigned hosting document root.

## Memory layers

- `/.uai/` — canonical active project memory.
- `/totem.uai` and `/taboo.uai` — root discovery copies of the primary anchors.
- `/docs/uai/` — public read-only mirror.
- `/docs/reports/` — 147 canonical full reports.
- `/docs/source-files/` — 219 extracted original Markdown files; no ZIP containers.
- `/docs/manifest.json` — canonical report inventory.
- `/docs/source-files/manifest.json` — source provenance and canonical mappings.
- `/.well-known/uai.json` — machine-readable discovery.

## Security

- CSP and security headers are emitted by PHP.
- `app/` and runtime data are denied from direct Apache access.
- Archived Markdown is escaped and rendered through a limited safe parser.
- Signup writes use CSRF validation, rate limiting, and UTC timestamps.

## Standards publication routes

Human routes: `/get-started`, `/standards`, `/standard/{slug}`, `/validator`, `/examples`, `/governance`, `/roadmap`, `/changelog`.
Machine routes: `/standards-catalog.json`, `/mission-brief.schema.json`, `/mission-example.json`, `/records/*.json`, `/.well-known/iarpg-operations.json`.
Long-term copies: `/docs/standards/`.

## Appearance architecture

- The HTML root defaults to `data-theme="light"`.
- A nonce-authorized bootstrap script applies a stored `iarpg-theme` value before the stylesheet loads, preventing a dark/light flash.
- The switch supports `light` and `dark` only, updates the browser theme-color metadata, and stores the choice in local browser storage.
- Dark technical consoles retain local contrast variables while the surrounding publication can remain light.