Skip to main content
Open Knowledge Inc.
Open Knowledge Inc. Information Security, AI & Regional Contribution
Colophon — Show, Don't Tell

Site Architecture, 24-Year Renewal History & Live Verification

Rather than making unverifiable claims, Open Knowledge Inc. demonstrates its engineering philosophy directly through this website (https://ok.st/). Every architectural layer—from Astro Zero-JS static separation and Rust 2024 compile-time verification to FreeBSD OpenZFS and PostgreSQL 19 (db01.ok.st)—is documented here for open inspection.

1. Overview & Essentials

1. Six Global Web Engineering Practices Implemented on ok.st

Practice 01

Bilingual Architecture & Cultural Clarity (i18n)

11 dedicated English pages (/en/**) and 220+ Japanese pages with explicit HTML lang attributes, reciprocal hreflang links, and zero untranslated script leakage.

Practice 02

WCAG 2.2 Level AA & JIS X 8341-3:2016 Level AA

12.5:1+ contrast ratios, 44x44px minimum interactive tap targets, Reading Comfort Bar, keyboard focus protection, and full Annex JB testing transparency.

Practice 03

Zero-CMS Attack Surface & RFC 9116 Security

Astro Zero-JS Static Site Generation eliminating server-side PHP/CMS RCE vectors, paired with strict CSP, HSTS Preload, and RFC 9116 /.well-known/security.txt.

Practice 04

Lighthouse 100 & W3C Web Sustainability (Green IT)

Sub-second static delivery using ultra-lightweight semantic SVG diagrams, achieving < 0.02g CO2 per page view in alignment with W3C Web Sustainability Guidelines 1.0.

Practice 05

AI-Native Discovery (/llms.txt & Schema.org @graph)

Machine-readable JSON-LD knowledge graphs on every page plus /llms.txt and /llms-full.txt indexes for accurate citation by generative AI and answer engines.

Practice 06

Cookieless Privacy & Live Verification

Zero third-party tracking cookies, zero ad-network scripts, and 100% browser-local diagnostic tools compliant with GDPR, CCPA, and Japan's APPI.

Architecture summary of Bilingual i18n, WCAG 2.2 AA Accessibility, Zero-CMS Static Edge, W3C Web Sustainability, AI-Native llms.txt Discovery, and Cookieless Privacy. 01–02 — HUMAN & INCLUSIVE Bilingual i18n & WCAG 2.2 AA • Explicit lang & hreflang pairs • 12.6:1+ contrast & 44px targets • JSL visual-spatial diagram clarity JIS X 8341-3:2016 Annex JB 03–04 — ZERO-CMS & GREEN IT Astro Static & W3C WSG 1.0 • Zero PHP/WordPress RCE surface • Lightweight inline SVG diagrams • < 0.02g CO2e per page view ap01.ok.st FreeBSD pf Edge 05–06 — AI-NATIVE & PRIVACY /llms.txt & Cookieless Trust • Schema.org @graph & /llms-full.txt • Zero 3rd-party tracking cookies • RFC 9116 /.well-known/security.txt 1-Click Third-Party Verifiable
1EdTech Open Badges v3.0 — Verifiable Digital Credentials DX Professional Level Certified (3 Domains)
Holder: Akio Kato, Founder, Representative Director & CTO
Professional Level Certified

16th DX Certification™ (Professional Level 2026) — Professional Level Certified (Cert ID: I0132899-260315)

Professional Level Certified across IT Technology & Business Innovation Trends

Verify Official Open Badge v3.0 ↗
Professional Level Certified

10th DX Business Certification™ (Professional Level 2026) — Professional Level Certified (Cert ID: B0127369-260615)

Professional Level Certified across DX Strategy, Business Models & Case Studies

Verify Official Open Badge v3.0 ↗
Professional Level Certified (METI/IPA DSS Aligned)

17th DX Next Certification™ (Professional Level 2026) — Professional Level Certified (Cert ID: I0134490-260915)

Professional Level Certified — Aligned with METI/IPA Digital Skill Standards (DSS)

Verify Official Open Badge v3.0 ↗
2. Practical Implementation & Countermeasures

2. 24-Year Website Renewal History (2002–2026) & 1-Click Live Verification Deck

Why Our Corporate Site Remained Unchanged for Over a Decade—and How We Rebuilt It in 2026

Between our founding in April 2002, our incorporation in July 2013, and late 2025, our engineering team prioritized client infrastructure, medical security, and regional cultural support above our own corporate PR—leaving our website as a minimal, decade-old static placeholder. In October 2026, we executed a complete 24th-anniversary architectural renewal: compiling 230+ pages through a zero-drift Rust Single-Source-of-Truth (SSoT) compiler, Astro Static Site Generation, subtree incremental search, contextual mini-TOC, hierarchy horizon cards, opt-in diagram lightbox, and 3-second 1-tap secure sign-in on PostgreSQL 19 (db01.ok.st).

3. Standards & Governance

3. Hardware, Operating System & Database Stack Specifications

Pipeline from Rust 2024 ssot-compiler and Astro 5 Static Generation to ap01.ok.st Edge delivery and private-vLAN db01.ok.st PostgreSQL 19 + OpenZFS vault. BUILD — COMPILE-TIME SSoT Rust 2024 + Astro 5 SSG • Frontmatter & link graph audit • Zero-JS static HTML + inline SVG Zero Runtime Interpreter Risk EDGE — ap01.ok.st FreeBSD 15.1 + Nginx TLS 1.3 • Kernel pf SYNPROXY defense • Strict CSP & HSTS Preload HTTP/2 & HTTP/3 Delivery VAULT — db01.ok.st (vLAN) PostgreSQL 19 + OpenZFS • FORCE ROW LEVEL SECURITY • 256-bit Merkle CoW snapshots No Public IP Exposure
System Layer Production Specification on ok.st
Static Edge Generator Astro 5 Static Site Generation (Zero-JS default) + Tailwind CSS + inline semantic SVG diagrams
Compile-Time Verification & WASM Rust 2024 Edition (ssot-compiler, link/frontmatter audit, and browser-local diagnostic logic)
Edge Server (ap01.ok.st) FreeBSD 15.1-RELEASE, kernel pf firewall with SYNPROXY, Nginx TLS 1.3 (HTTP/2 & HTTP/3)
Database Vault (db01.ok.st) FreeBSD 15.1 + OpenZFS (8 GB ARC, LZ4 compression, SHA-256 Merkle checksums) + PostgreSQL 19 (private vLAN)
Machine-Readable Endpoints /llms.txt /llms-full.txt /.well-known/security.txt /.well-known/pgp-key.txt
4. Technical Architecture & Specifications

4. HTTP Security Header Policy & W3C Sustainable Web Carbon Budget Formula

{`# Production Nginx Security Headers on ap01.ok.st (https://ok.st/)
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "DENY" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=()" always;

# W3C Web Sustainability Guidelines (WSG 1.0) Sustainable Web Design v4 Carbon Model:
# E_view = (Data_Transfer_GB * 0.055 kWh/GB) -> Carbon_g = E_view * 442 gCO2e/kWh < 0.02g CO2e / page view`}

Interactive Diagram & Visual Zoom

Vector SVG diagrams remain crisp at 300% zoom with selectable text Click outside or press ESC to close