Viir Phuria — Elite Engineering Portfolio & AI Agent Gateway

Production codebase powering viir.tech — a high-performance, defense-in-depth engineering portfolio, research portal, and AI agent interface built by Viir Phuria (Cybersecurity Engineer, Security Consultant, Full-Stack Developer, and IEEE Researcher).

Architecture Overview

                      +-----------------------------+
                      |   Cloudflare Managed DNS    |
                      |   (DNS-Only Apex + CNAME)   |
                      +--------------+--------------+
                                     |
                                     v
                      +-----------------------------+
                      |      Vercel Edge Proxy      |
                      | (SSL, www->apex, CDN Cache) |
                      +--------------+--------------+
                                     |
                                     v
                      +-----------------------------+
                      |   PythonAnywhere Host       |
                      |   (Gunicorn WSGI App)       |
                      +--------------+--------------+
                                     |
             +-----------------------+-----------------------+
             |                                               |
             v                                               v
+--------------------------+                   +--------------------------+
|      Django 4.2 LTS      |                   |    Static & Media Assets |
|  - Content Security Policy|                   |  - WhiteNoise Storage    |
|  - Argon2 Password Hasher|                   |  - Offline CSS Compressor|
|  - nh3 Rust XSS Filter   |                   +--------------------------+
|  - Model Context Protocol|
|  - RFC 9457 & RateLimits |
+------------+-------------+
             |
             v
+--------------------------+
|  Storage & Encryption    |
|  - Encrypted PII Fields  |
|  - Dynamic Cache Backend |
|  - SQLite / PostgreSQL   |
+--------------------------+

Core Capabilities

1. Defense-in-Depth Security

• Argon2 Password Hashing: Utilizes ParanoidArgon2Hasher configured with elevated memory and time costs.
• Content Security Policy (CSP): Per-request cryptographically secure random nonces injected via middleware (nonce-{secret}). Disables unsafe-inline scripts.
• Data-at-Rest Encryption: Visitor contact details, emails, and phone numbers are encrypted at the database level using django-cryptography.
• Rust-based HTML Sanitization: Powered by nh3 (Ammonia binding in Rust) for blog posts and rich content rendering.
• Brute-Force Lockout: Integrated with django-axes (5 failure limit, 1-hour cool-off, IP-based tracking).
• HSTS Preload: Strict Transport Security with subdomains and preload flags (max-age=31536000).

2. Autonomous Agent & AI Discoverability (100/100 Score)

• llms.txt & llms-full.txt: Standardized machine-readable agent documentation conforming to llmstxt.org.
• Model Context Protocol (MCP): Streamable JSON-RPC endpoint and manifest at /.well-known/mcp.json providing portfolio context tools to LLM agents.
• Content Negotiation (acceptmarkdown.com): Requests with Accept: text/markdown receive clean Markdown context rather than HTML.
• Agent-Friendly 404s: Probes requesting markdown on missing routes receive markdown problem summaries with links to sitemaps and documentation.
• RFC 9457 Problem Details: Standardized API error format returning application/problem+json.
• RFC 8594 & IETF RateLimit Headers: Comprehensive sunset notices, deprecation dates, and proactive rate-limit indicators on all API routes.

3. Developer Portal & REST API v1

• OpenAPI 3.1 Specification: Hosted at /api/openapi.json and /api/v1/openapi.json.
• Developer Portal: Live interactive documentation at https://viir.tech/developer/.
• Official CLI SDK: viir-cli Python package specification for rapid terminal querying of portfolio data.

Public REST Endpoints

All REST API endpoints support both JSON and Markdown content negotiation:

Local Development & Quickstart

1. Prerequisites

• Python 3.11+
• Virtual environment (venv)
• Git

2. Setup Instructions

# Clone repository
git clone https://github.com/Viir-Phuria/viir_portfolio.git
cd viir_portfolio

# Create and activate virtual environment
python -m venv .venv
# Windows:
.venv\Scripts\activate
# Linux/macOS:
source .venv/bin/activate

# Install dependencies
pip install --upgrade pip
pip install -r requirements.txt

# Configure environment variables
cp .env.example .env
# Edit .env with your specific local settings

# Run database migrations
python manage.py migrate

# Create administrative user
python manage.py createsuperuser

# Start development server
python manage.py runserver

Open http://127.0.0.1:8000 in your browser. The administrative portal is accessible at http://127.0.0.1:8000/dashboard/.

Testing & Quality Assurance

We maintain a rigorous test suite of 47 automated tests verifying agentic readiness, rate-limiting, CSP nonce generation, content negotiation, and API schemas:

# Run unit test suite
python manage.py test viir_folio

# Run tests with pytest
pytest

# Code style formatting check
black --check .

# Linting and syntax check
flake8 viir_folio viir_portfolio --statistics --max-line-length=127

# Check for uncommitted database migrations
python manage.py makemigrations --check --dry-run

# Production security deployment checklist verification
python manage.py check --deploy

Environment Variables Reference

Production Deployment Checklist

When deploying changes to PythonAnywhere / Vercel:

1. Pull Latest Changes:

   git pull origin main
   

2. Collect Static Files:

   python manage.py collectstatic --noinput
   

3. Compile Offline Compressed Bundles (if COMPRESS_OFFLINE=True):

   python manage.py compress --force
   

4. Apply Migrations:

   python manage.py migrate
   

5. Reload WSGI Process:

   touch /var/www/viir_pythonanywhere_com_wsgi.py
   

Contributing & Security

• Security Advisories: Please review SECURITY.md for vulnerability reporting and coordinated disclosure guidelines.
• Contributing: Please review CONTRIBUTING.md for coding conventions, commit standards, and pull request procedures.
• Changelog: Release history and updates are documented in CHANGELOG.md.

License

This project is open-source software licensed under the MIT License.