The avanserv build logDated write-ups of what I built for avanserv and why, from the infrastructure to the site you are reading.https://avanserv.com/build-log2026-09-26T00:00:00ZAntoine Van ServeytHolding the page still when the brand typeface loadshttps://avanserv.com/build-log/holding-the-page-still2026-09-26T00:00:00Z2026-09-26T00:00:00ZFitting fallback faces so text stops jumping when the brand typeface lands, and the three ways the measuring gate was blind to what visitors saw.A business card a phone can scan and savehttps://avanserv.com/build-log/a-business-card-a-phone-can-save2026-09-23T00:00:00Z2026-09-23T00:00:00ZA printed QR code that opens a card page and saves the contact, and what a Pixel taught me about vCard photos and Chrome on Android.Publishing the legal documents as pages of the sitehttps://avanserv.com/build-log/legal-documents-as-pages2026-09-22T00:00:00Z2026-09-22T00:00:00ZThe contracts and policies moved from a repository to pages of the site, each with a stored PDF, a link per clause and the security.txt its policy promised.From a bare cluster to a staging environment reconciled from githttps://avanserv.com/build-log/staging-from-git2026-09-19T00:00:00Z2026-09-19T00:00:00ZHow a bare Talos cluster became a staging environment that Argo CD reconciles from git, with its secrets, certificates and both web origins.Parking an environment, and bringing it back unattendedhttps://avanserv.com/build-log/parking-an-environment2026-09-16T00:00:00Z2026-09-16T00:00:00ZTaking staging down to what a rebuild reuses in 87 seconds, and back up unattended in about eleven minutes, with every plan read by a gate first.Bootstrapping a self-hosted Kubernetes estate on Talos and Scalewayhttps://avanserv.com/build-log/talos-on-scaleway2026-09-10T00:00:00Z2026-09-10T00:00:00ZWhy the platform runs its own Kubernetes control plane on Talos and Scaleway, and the traps met bringing the first cluster up from OpenTofu.The pre-PR gate that stands in for a teamhttps://avanserv.com/build-log/the-pre-pr-gate2026-08-28T00:00:00Z2026-08-28T00:00:00ZWith no second engineer to read a diff, every pull request passes scanners, a model review that blocks on security, and a local gate that signs a receipt.Serving the site in French at its own pathshttps://avanserv.com/build-log/the-site-in-french2026-08-22T00:00:00Z2026-08-22T00:00:00ZWhy French lives at /fr while English keeps the bare paths, and how one language choice follows a visitor from the site into the application.Splitting the frontend and prerendering the public sitehttps://avanserv.com/build-log/prerendering-the-public-site2026-08-19T00:00:00Z2026-08-19T00:00:00ZHow the public site became its own prerendered build, and how a lint rule between it and the application became a package boundary.Taking the frontend to WCAG 2.2 AAhttps://avanserv.com/build-log/wcag-2-2-aa2026-08-06T00:00:00Z2026-08-06T00:00:00ZFour gates that each own a class of accessibility defect, and what they found on the way to WCAG 2.2 AA.The rebrand to avanserv, on a monochrome token systemhttps://avanserv.com/build-log/the-rebrand2026-08-04T00:00:00Z2026-08-04T00:00:00ZHow the rebrand to avanserv turned every colour into a role on one ink ramp, and why the contrast gate had to be fixed before it could be trusted.Per-organisation OIDC SSO with identifier-first loginhttps://avanserv.com/build-log/per-organisation-sso2026-07-02T00:00:00Z2026-07-02T00:00:00ZSigning in through each organisation's own identity provider, behind an email-first login, when the admins who configure that provider cannot be trusted.Transactional email as a subsystemhttps://avanserv.com/build-log/transactional-email2026-06-27T00:00:00Z2026-06-27T00:00:00ZEmail built once, as a subsystem: an outbox row in the caller's transaction, MJML compiled without Node, and an admin view to replay failures.Access control as a declarative DSL, then roles and capabilitieshttps://avanserv.com/build-log/access-control-as-a-dsl2026-02-11T00:00:00Z2026-02-11T00:00:00ZAccess rules declared on each model and compiled to both a SQL filter and a record check, and the three tiers of rights that became roles and capabilities.Multi-tenancy from the first modelhttps://avanserv.com/build-log/multi-tenancy-from-the-first-model2026-02-04T00:00:00Z2026-02-04T00:00:00ZHow organisation isolation went into the platform's base model in its first week, where the automatic filter stops, and what I still owe it.Day one: a multi-tenant framework from an empty repositoryhttps://avanserv.com/build-log/day-one2026-02-01T00:00:00Z2026-02-01T00:00:00ZThe platform's first evening: a written plan, a toolchain that refused sloppy code, and the request context that tenancy would hang from.