diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..941f4fb
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,15 @@
+.git
+.gitea
+.github
+.venv
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+.benchmarks/
+media/
+staticfiles/
diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
new file mode 100644
index 0000000..360e702
--- /dev/null
+++ b/.gitea/workflows/ci.yml
@@ -0,0 +1,121 @@
+name: CI
+
+on:
+  pull_request:
+  schedule:
+    - cron: "0 2 * * *"
+
+concurrency:
+  group: ci-pr-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  ci:
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-latest
+    env:
+      CI_IMAGE: nohype-ci:${{ github.run_id }}
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Build
+        run: docker build -t "$CI_IMAGE" .
+
+      - name: Start PostgreSQL
+        run: |
+          docker run -d --name ci-postgres \
+            -e POSTGRES_DB=nohype \
+            -e POSTGRES_USER=nohype \
+            -e POSTGRES_PASSWORD=nohype \
+            postgres:16-alpine
+          for i in $(seq 1 30); do
+            if docker exec ci-postgres pg_isready -U nohype -d nohype >/dev/null; then
+              exit 0
+            fi
+            sleep 2
+          done
+          docker logs ci-postgres || true
+          exit 1
+
+      - name: Ruff
+        run: docker run --rm --network container:ci-postgres -e SECRET_KEY=ci-secret-key -e DATABASE_URL=postgres://nohype:nohype@127.0.0.1:5432/nohype "$CI_IMAGE" ruff check .
+
+      - name: Mypy
+        run: docker run --rm --network container:ci-postgres -e SECRET_KEY=ci-secret-key -e DATABASE_URL=postgres://nohype:nohype@127.0.0.1:5432/nohype "$CI_IMAGE" mypy apps config
+
+      - name: Pytest
+        run: docker run --rm --network container:ci-postgres -e SECRET_KEY=ci-secret-key -e DATABASE_URL=postgres://nohype:nohype@127.0.0.1:5432/nohype "$CI_IMAGE" pytest
+
+      - name: Tailwind build (assert generated diff is clean)
+        run: |
+          docker run --name ci-tailwind \
+            --network container:ci-postgres \
+            -e SECRET_KEY=ci-secret-key \
+            -e DATABASE_URL=postgres://nohype:nohype@127.0.0.1:5432/nohype \
+            "$CI_IMAGE" \
+            sh -lc "python manage.py tailwind install --no-input && python manage.py tailwind build"
+          docker cp ci-tailwind:/app/theme/static/css/styles.css /tmp/ci-styles.css
+          docker rm -f ci-tailwind
+          cmp -s theme/static/css/styles.css /tmp/ci-styles.css
+
+      - name: Remove PostgreSQL
+        if: always()
+        run: |
+          docker rm -f ci-postgres || true
+
+      - name: Remove CI image
+        if: always()
+        run: docker image rm -f "$CI_IMAGE" || true
+
+  nightly-e2e:
+    if: github.event_name == 'schedule'
+    runs-on: ubuntu-latest
+    env:
+      CI_IMAGE: nohype-ci-nightly:${{ github.run_id }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Build
+        run: docker build -t "$CI_IMAGE" .
+      - name: Start PostgreSQL
+        run: |
+          docker run -d --name nightly-postgres \
+            -e POSTGRES_DB=nohype \
+            -e POSTGRES_USER=nohype \
+            -e POSTGRES_PASSWORD=nohype \
+            postgres:16-alpine
+          for i in $(seq 1 30); do
+            if docker exec nightly-postgres pg_isready -U nohype -d nohype >/dev/null; then
+              exit 0
+            fi
+            sleep 2
+          done
+          docker logs nightly-postgres || true
+          exit 1
+      - name: Start dev server with seeded content
+        run: |
+          docker run -d --name nightly-e2e --network container:nightly-postgres \
+            -e SECRET_KEY=ci-secret-key \
+            -e DATABASE_URL=postgres://nohype:nohype@127.0.0.1:5432/nohype \
+            "$CI_IMAGE" \
+            sh -lc "python manage.py migrate --noinput && python manage.py seed_e2e_content && python manage.py runserver 0.0.0.0:8000"
+          for i in $(seq 1 40); do
+            if docker exec nightly-e2e curl -fsS http://127.0.0.1:8000/ >/dev/null; then
+              exit 0
+            fi
+            sleep 2
+          done
+          docker logs nightly-e2e || true
+          exit 1
+      - name: Run nightly Playwright journey
+        run: |
+          docker exec nightly-e2e python -m playwright install chromium
+          docker exec -e E2E_BASE_URL=http://127.0.0.1:8000 nightly-e2e \
+            pytest -o addopts='' apps/core/tests/test_nightly_e2e_playwright.py -q
+      - name: Remove nightly container
+        if: always()
+        run: |
+          docker rm -f nightly-e2e || true
+          docker rm -f nightly-postgres || true
+      - name: Remove CI image
+        if: always()
+        run: docker image rm -f "$CI_IMAGE" || true
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..051f926
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,16 @@
+__pycache__/
+*.py[cod]
+*.sqlite3
+*.log
+.env
+.pytest_cache/
+.coverage
+htmlcov/
+.mypy_cache/
+.ruff_cache/
+node_modules/
+staticfiles/
+media/
+.DS_Store
+.vscode/
+.idea/
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..ad6ff29
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,15 @@
+# Changelog
+
+## 2026-02-28
+
+- Scaffolded Dockerized Django/Wagtail project structure with split settings.
+- Implemented core apps: blog, authors, legal, comments, newsletter, core consent/settings.
+- Added Wagtail models, snippets, StreamField blocks, RSS feeds, sitemap/robots routes.
+- Added consent middleware/service and cookie banner integration.
+- Added comment submission flow with moderation-ready model and rate limiting.
+- Added newsletter subscription + confirmation flow with provider sync abstraction.
+- Added templates/static assets baseline for homepage, article index/read, legal, about.
+- Added pytest suite with >90% coverage enforcement and passing Docker CI checks.
+- Added PR-only containerized CI path (`docker build` + `docker run`) to avoid compose-network exhaustion on shared runners.
+- Added newsletter signup forms in nav/footer/article, client-side progressive submit UX, and article social share controls.
+- Added content integrity management command and comment data-retention purge command with automated tests.
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..361c3ff
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,35 @@
+FROM python:3.12-slim
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PIP_NO_CACHE_DIR=1
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    libpq-dev \
+    curl \
+    nodejs \
+    npm \
+    libasound2 \
+    libatk-bridge2.0-0 \
+    libatk1.0-0 \
+    libcups2 \
+    libgbm1 \
+    libgtk-3-0 \
+    libnss3 \
+    libx11-xcb1 \
+    libxcomposite1 \
+    libxdamage1 \
+    libxfixes3 \
+    libxrandr2 \
+    fonts-liberation \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /app
+
+COPY requirements /app/requirements
+RUN pip install --upgrade pip && pip install -r requirements/base.txt
+
+COPY . /app
+
+CMD ["python", "manage.py", "runserver", "0.0.0.0:8000"]
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..171176b
--- /dev/null
+++ b/README.md
@@ -0,0 +1,67 @@
+# No Hype AI
+
+Django 5.2 + Wagtail 7 blog engine for No Hype AI.
+
+## Environment Variables
+
+Required:
+- `SECRET_KEY`
+- `DATABASE_URL`
+- `ALLOWED_HOSTS`
+- `DEBUG`
+- `WAGTAIL_SITE_NAME`
+
+Also used:
+- `WAGTAILADMIN_BASE_URL`
+- `CONSENT_POLICY_VERSION`
+- `EMAIL_BACKEND`
+- `EMAIL_HOST`
+- `EMAIL_PORT`
+- `EMAIL_USE_TLS`
+- `EMAIL_HOST_USER`
+- `EMAIL_HOST_PASSWORD`
+- `DEFAULT_FROM_EMAIL`
+- `NEWSLETTER_PROVIDER`
+
+## Containerized Development
+
+```bash
+docker compose build
+docker compose run --rm web python manage.py migrate
+docker compose up
+```
+
+App is exposed on `http://localhost:8035`.
+
+## Test/Lint/Typecheck (Docker)
+
+```bash
+docker compose run --rm web pytest
+docker compose run --rm web ruff check .
+docker compose run --rm web mypy apps config
+```
+
+## Deploy Runbook
+
+```bash
+git pull origin main
+pip install -r requirements/production.txt
+python manage.py migrate --run-syncdb
+python manage.py collectstatic --noinput
+python manage.py tailwind build
+python manage.py check_content_integrity
+sudo systemctl reload gunicorn
+```
+
+## Backups
+
+- PostgreSQL dump daily: `pg_dump | gzip > backup-$(date +%Y%m%d).sql.gz`
+- `MEDIA_ROOT` rsynced offsite daily
+- Restore DB: `gunzip -c backup-YYYYMMDD.sql.gz | psql "$DATABASE_URL"`
+- Restore media: `rsync -avz <backup-host>:/path/to/media/ /srv/nohypeai/media/`
+
+## Runtime Notes
+
+- Keep Caddy serving `/static/` and `/media/` directly in production.
+- Keep Gunicorn behind Caddy and run from a systemd service/socket pair.
+- Use `python manage.py purge_old_comment_data --months 24` in cron for comment-data retention.
diff --git a/apps/__init__.py b/apps/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/authors/__init__.py b/apps/authors/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/authors/apps.py b/apps/authors/apps.py
new file mode 100644
index 0000000..3ead996
--- /dev/null
+++ b/apps/authors/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class AuthorsConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.authors"
diff --git a/apps/authors/migrations/0001_initial.py b/apps/authors/migrations/0001_initial.py
new file mode 100644
index 0000000..3e9886a
--- /dev/null
+++ b/apps/authors/migrations/0001_initial.py
@@ -0,0 +1,34 @@
+# Generated by Django 5.2.11 on 2026-02-28 11:42
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('wagtailimages', '0027_image_description'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Author',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('name', models.CharField(max_length=100)),
+                ('slug', models.SlugField(unique=True)),
+                ('bio', models.TextField(blank=True)),
+                ('twitter_url', models.URLField(blank=True)),
+                ('github_url', models.URLField(blank=True)),
+                ('avatar', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='wagtailimages.image')),
+                ('user', models.OneToOneField(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)),
+            ],
+            options={
+                'verbose_name': 'Author',
+            },
+        ),
+    ]
diff --git a/apps/authors/migrations/__init__.py b/apps/authors/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/authors/models.py b/apps/authors/models.py
new file mode 100644
index 0000000..9d0cb3a
--- /dev/null
+++ b/apps/authors/models.py
@@ -0,0 +1,44 @@
+from __future__ import annotations
+
+from django.contrib.auth import get_user_model
+from django.db import models
+from django.db.models import SET_NULL
+from wagtail.admin.panels import FieldPanel
+
+User = get_user_model()
+
+
+class Author(models.Model):
+    user = models.OneToOneField(User, null=True, blank=True, on_delete=SET_NULL)
+    name = models.CharField(max_length=100)
+    slug = models.SlugField(unique=True)
+    bio = models.TextField(blank=True)
+    avatar = models.ForeignKey(
+        "wagtailimages.Image", null=True, blank=True, on_delete=SET_NULL, related_name="+"
+    )
+    twitter_url = models.URLField(blank=True)
+    github_url = models.URLField(blank=True)
+
+    panels = [
+        FieldPanel("user"),
+        FieldPanel("name"),
+        FieldPanel("slug"),
+        FieldPanel("bio"),
+        FieldPanel("avatar"),
+        FieldPanel("twitter_url"),
+        FieldPanel("github_url"),
+    ]
+
+    class Meta:
+        verbose_name = "Author"
+
+    def __str__(self) -> str:
+        return self.name
+
+    def get_social_links(self) -> dict[str, str]:
+        links: dict[str, str] = {}
+        if self.twitter_url:
+            links["twitter"] = self.twitter_url
+        if self.github_url:
+            links["github"] = self.github_url
+        return links
diff --git a/apps/authors/tests/__init__.py b/apps/authors/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/authors/tests/test_models.py b/apps/authors/tests/test_models.py
new file mode 100644
index 0000000..63f9fdf
--- /dev/null
+++ b/apps/authors/tests/test_models.py
@@ -0,0 +1,16 @@
+import pytest
+
+from apps.authors.models import Author
+
+
+@pytest.mark.django_db
+def test_author_create_and_social_links():
+    author = Author.objects.create(name="Mark", slug="mark", twitter_url="https://x.com/mark")
+    assert str(author) == "Mark"
+    assert author.get_social_links() == {"twitter": "https://x.com/mark"}
+
+
+@pytest.mark.django_db
+def test_author_user_nullable():
+    author = Author.objects.create(name="No User", slug="no-user")
+    assert author.user is None
diff --git a/apps/authors/wagtail_hooks.py b/apps/authors/wagtail_hooks.py
new file mode 100644
index 0000000..e542c6c
--- /dev/null
+++ b/apps/authors/wagtail_hooks.py
@@ -0,0 +1,15 @@
+from wagtail.snippets.models import register_snippet
+from wagtail.snippets.views.snippets import SnippetViewSet
+
+from apps.authors.models import Author
+
+
+class AuthorViewSet(SnippetViewSet):
+    model = Author
+    icon = "user"
+    list_display = ["name", "slug"]
+    search_fields = ["name"]
+    add_to_admin_menu = True
+
+
+register_snippet(AuthorViewSet)
diff --git a/apps/blog/__init__.py b/apps/blog/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/blog/apps.py b/apps/blog/apps.py
new file mode 100644
index 0000000..7c0f5c2
--- /dev/null
+++ b/apps/blog/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class BlogConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.blog"
diff --git a/apps/blog/blocks.py b/apps/blog/blocks.py
new file mode 100644
index 0000000..8397fb9
--- /dev/null
+++ b/apps/blog/blocks.py
@@ -0,0 +1,81 @@
+from wagtail import blocks
+from wagtail.embeds.blocks import EmbedBlock
+from wagtail.images.blocks import ImageChooserBlock
+
+
+class CodeBlock(blocks.StructBlock):
+    LANGUAGE_CHOICES = [
+        ("python", "Python"),
+        ("javascript", "JavaScript"),
+        ("typescript", "TypeScript"),
+        ("tsx", "TSX"),
+        ("bash", "Bash"),
+        ("json", "JSON"),
+        ("css", "CSS"),
+        ("html", "HTML"),
+        ("plaintext", "Plain Text"),
+    ]
+
+    language = blocks.ChoiceBlock(choices=LANGUAGE_CHOICES, default="python")
+    filename = blocks.CharBlock(required=False)
+    raw_code = blocks.TextBlock()
+
+    class Meta:
+        icon = "code"
+        template = "blog/blocks/code_block.html"
+
+    def get_language_label(self, value):
+        choices = dict(self.LANGUAGE_CHOICES)
+        lang = str(value.get("language", "")) if isinstance(value, dict) else ""
+        return choices.get(lang, "Plain Text")
+
+
+class CalloutBlock(blocks.StructBlock):
+    ICON_CHOICES = [
+        ("info", "Info"),
+        ("warning", "Warning"),
+        ("trophy", "Trophy / Conclusion"),
+        ("tip", "Tip"),
+    ]
+
+    icon = blocks.ChoiceBlock(choices=ICON_CHOICES, default="info")
+    heading = blocks.CharBlock()
+    body = blocks.RichTextBlock(features=["bold", "italic", "link"])
+
+    class Meta:
+        icon = "pick"
+        template = "blog/blocks/callout_block.html"
+
+
+class PullQuoteBlock(blocks.StructBlock):
+    quote = blocks.TextBlock()
+    attribution = blocks.CharBlock(required=False)
+
+    class Meta:
+        icon = "openquote"
+        template = "blog/blocks/pull_quote_block.html"
+
+
+class ImageBlock(blocks.StructBlock):
+    image = ImageChooserBlock()
+    caption = blocks.CharBlock(required=False)
+    alt = blocks.CharBlock(required=True)
+
+    class Meta:
+        icon = "image"
+        template = "blog/blocks/image_block.html"
+
+
+ARTICLE_BODY_BLOCKS = [
+    (
+        "rich_text",
+        blocks.RichTextBlock(
+            features=["h2", "h3", "h4", "bold", "italic", "link", "ol", "ul", "hr", "blockquote", "code"]
+        ),
+    ),
+    ("code", CodeBlock()),
+    ("callout", CalloutBlock()),
+    ("image", ImageBlock()),
+    ("embed", EmbedBlock()),
+    ("pull_quote", PullQuoteBlock()),
+]
diff --git a/apps/blog/feeds.py b/apps/blog/feeds.py
new file mode 100644
index 0000000..efd8842
--- /dev/null
+++ b/apps/blog/feeds.py
@@ -0,0 +1,50 @@
+from django.conf import settings
+from django.contrib.syndication.views import Feed
+from django.shortcuts import get_object_or_404
+from taggit.models import Tag
+
+from apps.blog.models import ArticlePage
+
+
+class AllArticlesFeed(Feed):
+    title = "No Hype AI"
+    link = "/articles/"
+    description = "Honest AI coding tool reviews for developers."
+
+    def get_object(self, request):
+        self.request = request
+        return None
+
+    def items(self):
+        return ArticlePage.objects.live().order_by("-first_published_at")[:20]
+
+    def item_title(self, item: ArticlePage):
+        return item.title
+
+    def item_description(self, item: ArticlePage):
+        return item.summary
+
+    def item_pubdate(self, item: ArticlePage):
+        return item.first_published_at
+
+    def item_author_name(self, item: ArticlePage):
+        return item.author.name
+
+    def item_link(self, item: ArticlePage):
+        if hasattr(self, "request") and self.request is not None:
+            full_url = item.get_full_url(self.request)
+            if full_url:
+                return full_url
+        return f"{settings.WAGTAILADMIN_BASE_URL.rstrip('/')}{item.url}"
+
+
+class TagArticlesFeed(AllArticlesFeed):
+    def get_object(self, request, tag_slug: str):
+        self.request = request
+        return get_object_or_404(Tag, slug=tag_slug)
+
+    def title(self, obj):
+        return f"No Hype AI — {obj.name}"
+
+    def items(self, obj):
+        return ArticlePage.objects.live().filter(tags=obj).order_by("-first_published_at")[:20]
diff --git a/apps/blog/migrations/0001_initial.py b/apps/blog/migrations/0001_initial.py
new file mode 100644
index 0000000..b8685cf
--- /dev/null
+++ b/apps/blog/migrations/0001_initial.py
@@ -0,0 +1,98 @@
+# Generated by Django 5.2.11 on 2026-02-28 11:42
+
+import django.db.models.deletion
+import modelcluster.contrib.taggit
+import modelcluster.fields
+import wagtail.fields
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('authors', '0001_initial'),
+        ('taggit', '0006_rename_taggeditem_content_type_object_id_taggit_tagg_content_8fc721_idx'),
+        ('wagtailcore', '0094_alter_page_locale'),
+        ('wagtailimages', '0027_image_description'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='ArticleIndexPage',
+            fields=[
+                ('page_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='wagtailcore.page')),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=('wagtailcore.page',),
+        ),
+        migrations.CreateModel(
+            name='AboutPage',
+            fields=[
+                ('page_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='wagtailcore.page')),
+                ('mission_statement', models.TextField()),
+                ('body', wagtail.fields.RichTextField(blank=True)),
+                ('featured_author', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='authors.author')),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=('wagtailcore.page',),
+        ),
+        migrations.CreateModel(
+            name='ArticlePage',
+            fields=[
+                ('page_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='wagtailcore.page')),
+                ('canonical_url', models.URLField(blank=True, help_text="Leave blank to use the page's URL.", max_length=255, verbose_name='Canonical URL')),
+                ('summary', models.TextField()),
+                ('body', wagtail.fields.StreamField([('rich_text', 0), ('code', 4), ('callout', 8), ('image', 11), ('embed', 12), ('pull_quote', 13)], block_lookup={0: ('wagtail.blocks.RichTextBlock', (), {'features': ['h2', 'h3', 'h4', 'bold', 'italic', 'link', 'ol', 'ul', 'hr', 'blockquote', 'code']}), 1: ('wagtail.blocks.ChoiceBlock', [], {'choices': [('python', 'Python'), ('javascript', 'JavaScript'), ('typescript', 'TypeScript'), ('tsx', 'TSX'), ('bash', 'Bash'), ('json', 'JSON'), ('css', 'CSS'), ('html', 'HTML'), ('plaintext', 'Plain Text')]}), 2: ('wagtail.blocks.CharBlock', (), {'required': False}), 3: ('wagtail.blocks.TextBlock', (), {}), 4: ('wagtail.blocks.StructBlock', [[('language', 1), ('filename', 2), ('raw_code', 3)]], {}), 5: ('wagtail.blocks.ChoiceBlock', [], {'choices': [('info', 'Info'), ('warning', 'Warning'), ('trophy', 'Trophy / Conclusion'), ('tip', 'Tip')]}), 6: ('wagtail.blocks.CharBlock', (), {}), 7: ('wagtail.blocks.RichTextBlock', (), {'features': ['bold', 'italic', 'link']}), 8: ('wagtail.blocks.StructBlock', [[('icon', 5), ('heading', 6), ('body', 7)]], {}), 9: ('wagtail.images.blocks.ImageChooserBlock', (), {}), 10: ('wagtail.blocks.CharBlock', (), {'required': True}), 11: ('wagtail.blocks.StructBlock', [[('image', 9), ('caption', 2), ('alt', 10)]], {}), 12: ('wagtail.embeds.blocks.EmbedBlock', (), {}), 13: ('wagtail.blocks.StructBlock', [[('quote', 3), ('attribution', 2)]], {})})),
+                ('read_time_mins', models.PositiveIntegerField(default=1, editable=False)),
+                ('comments_enabled', models.BooleanField(default=True)),
+                ('author', models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='authors.author')),
+                ('hero_image', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='wagtailimages.image')),
+                ('og_image', models.ForeignKey(blank=True, help_text='Shown when linking to this page on social media. If blank, may show an image from the page, or the default from Settings > SEO.', null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='wagtailimages.image', verbose_name='Preview image')),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=('wagtailcore.page', models.Model),
+        ),
+        migrations.CreateModel(
+            name='ArticleTag',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('content_object', modelcluster.fields.ParentalKey(on_delete=django.db.models.deletion.CASCADE, related_name='tagged_items', to='blog.articlepage')),
+                ('tag', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='%(app_label)s_%(class)s_items', to='taggit.tag')),
+            ],
+            options={
+                'abstract': False,
+            },
+        ),
+        migrations.AddField(
+            model_name='articlepage',
+            name='tags',
+            field=modelcluster.contrib.taggit.ClusterTaggableManager(blank=True, help_text='A comma-separated list of tags.', through='blog.ArticleTag', to='taggit.Tag', verbose_name='Tags'),
+        ),
+        migrations.CreateModel(
+            name='HomePage',
+            fields=[
+                ('page_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='wagtailcore.page')),
+                ('featured_article', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='blog.articlepage')),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=('wagtailcore.page',),
+        ),
+        migrations.CreateModel(
+            name='TagMetadata',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('colour', models.CharField(choices=[('cyan', 'Cyan'), ('pink', 'Pink'), ('neutral', 'Neutral')], default='neutral', max_length=20)),
+                ('tag', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, related_name='metadata', to='taggit.tag')),
+            ],
+        ),
+    ]
diff --git a/apps/blog/migrations/__init__.py b/apps/blog/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/blog/models.py b/apps/blog/models.py
new file mode 100644
index 0000000..0eddc3d
--- /dev/null
+++ b/apps/blog/models.py
@@ -0,0 +1,199 @@
+from __future__ import annotations
+
+import re
+from math import ceil
+from typing import Any
+
+from django.core.paginator import EmptyPage, PageNotAnInteger, Paginator
+from django.db import models
+from django.db.models import CASCADE, PROTECT, SET_NULL, Prefetch
+from modelcluster.contrib.taggit import ClusterTaggableManager
+from modelcluster.fields import ParentalKey
+from taggit.models import Tag, TaggedItemBase
+from wagtail.admin.panels import FieldPanel, PageChooserPanel
+from wagtail.fields import RichTextField, StreamField
+from wagtail.models import Page
+from wagtailseo.models import SeoMixin
+
+from apps.blog.blocks import ARTICLE_BODY_BLOCKS
+
+
+class HomePage(Page):
+    featured_article = models.ForeignKey(
+        "blog.ArticlePage", null=True, blank=True, on_delete=SET_NULL, related_name="+"
+    )
+
+    subpage_types = ["blog.ArticleIndexPage", "legal.LegalIndexPage", "blog.AboutPage"]
+
+    content_panels = Page.content_panels + [
+        PageChooserPanel("featured_article", "blog.ArticlePage"),
+    ]
+
+    def get_context(self, request, *args, **kwargs):
+        ctx = super().get_context(request, *args, **kwargs)
+        articles_qs = (
+            ArticlePage.objects.live()
+            .public()
+            .select_related("author")
+            .prefetch_related("tags__metadata")
+            .order_by("-first_published_at")
+        )
+        articles = list(articles_qs[:5])
+        ctx["featured_article"] = self.featured_article
+        ctx["latest_articles"] = articles
+        ctx["more_articles"] = articles[:3]
+        return ctx
+
+
+class ArticleIndexPage(Page):
+    parent_page_types = ["blog.HomePage"]
+    subpage_types = ["blog.ArticlePage"]
+    ARTICLES_PER_PAGE = 12
+
+    def get_articles(self):
+        return (
+            ArticlePage.objects.child_of(self)
+            .live()
+            .select_related("author")
+            .prefetch_related("tags__metadata")
+            .order_by("-first_published_at")
+        )
+
+    def get_context(self, request, *args, **kwargs):
+        ctx = super().get_context(request, *args, **kwargs)
+        tag_slug = request.GET.get("tag")
+        articles = self.get_articles()
+        available_tags = (
+            Tag.objects.filter(id__in=articles.values_list("tags__id", flat=True)).distinct().order_by("name")
+        )
+        if tag_slug:
+            articles = articles.filter(tags__slug=tag_slug)
+        paginator = Paginator(articles, self.ARTICLES_PER_PAGE)
+        page_num = request.GET.get("page")
+        try:
+            page_obj = paginator.page(page_num)
+        except PageNotAnInteger:
+            page_obj = paginator.page(1)
+        except EmptyPage:
+            page_obj = paginator.page(paginator.num_pages)
+        ctx["articles"] = page_obj
+        ctx["paginator"] = paginator
+        ctx["active_tag"] = tag_slug
+        ctx["available_tags"] = available_tags
+        return ctx
+
+
+class ArticleTag(TaggedItemBase):
+    content_object = ParentalKey("blog.ArticlePage", related_name="tagged_items", on_delete=CASCADE)
+
+
+class TagMetadata(models.Model):
+    COLOUR_CHOICES = [("cyan", "Cyan"), ("pink", "Pink"), ("neutral", "Neutral")]
+
+    tag = models.OneToOneField("taggit.Tag", on_delete=CASCADE, related_name="metadata")
+    colour = models.CharField(max_length=20, choices=COLOUR_CHOICES, default="neutral")
+
+    @classmethod
+    def get_fallback_css(cls) -> dict[str, str]:
+        return {"bg": "bg-zinc-100", "text": "text-zinc-800"}
+
+    def get_css_classes(self) -> dict[str, str]:
+        mapping = {
+            "cyan": {"bg": "bg-cyan-100", "text": "text-cyan-900"},
+            "pink": {"bg": "bg-pink-100", "text": "text-pink-900"},
+            "neutral": self.get_fallback_css(),
+        }
+        return mapping.get(self.colour, self.get_fallback_css())
+
+
+class ArticlePage(SeoMixin, Page):
+    author = models.ForeignKey("authors.Author", on_delete=PROTECT)
+    hero_image = models.ForeignKey(
+        "wagtailimages.Image", null=True, blank=True, on_delete=SET_NULL, related_name="+"
+    )
+    summary = models.TextField()
+    body = StreamField(ARTICLE_BODY_BLOCKS, use_json_field=True)
+    tags = ClusterTaggableManager(through="blog.ArticleTag", blank=True)
+    read_time_mins = models.PositiveIntegerField(editable=False, default=1)
+    comments_enabled = models.BooleanField(default=True)
+
+    parent_page_types = ["blog.ArticleIndexPage"]
+    subpage_types: list[str] = []
+
+    content_panels = Page.content_panels + [
+        FieldPanel("author"),
+        FieldPanel("hero_image"),
+        FieldPanel("summary"),
+        FieldPanel("body"),
+        FieldPanel("tags"),
+        FieldPanel("comments_enabled"),
+    ]
+
+    promote_panels = Page.promote_panels + SeoMixin.seo_panels
+
+    search_fields = Page.search_fields
+
+    def save(self, *args: Any, **kwargs: Any) -> None:
+        self.read_time_mins = self._compute_read_time()
+        return super().save(*args, **kwargs)
+
+    def _compute_read_time(self) -> int:
+        words = []
+        for block in self.body:
+            if block.block_type == "code":
+                continue
+            value = block.value
+            text = value.source if hasattr(value, "source") else str(value)
+            words.extend(re.findall(r"\w+", text))
+        return max(1, ceil(len(words) / 200))
+
+    def get_tags_with_metadata(self):
+        tags = self.tags.all()
+        return [(tag, getattr(tag, "metadata", None)) for tag in tags]
+
+    def get_related_articles(self, count: int = 3):
+        tag_ids = self.tags.values_list("id", flat=True)
+        related = list(
+            ArticlePage.objects.live()
+            .filter(tags__in=tag_ids)
+            .exclude(pk=self.pk)
+            .distinct()
+            .order_by("-first_published_at")[:count]
+        )
+        if len(related) < count:
+            exclude_ids = [a.pk for a in related] + [self.pk]
+            fallback = list(
+                ArticlePage.objects.live()
+                .exclude(pk__in=exclude_ids)
+                .order_by("-first_published_at")[: count - len(related)]
+            )
+            return related + fallback
+        return related
+
+    def get_context(self, request, *args, **kwargs):
+        ctx = super().get_context(request, *args, **kwargs)
+        ctx["related_articles"] = self.get_related_articles()
+        from apps.comments.models import Comment
+
+        approved_replies = Comment.objects.filter(is_approved=True).select_related("parent")
+        ctx["approved_comments"] = self.comments.filter(is_approved=True, parent__isnull=True).prefetch_related(
+            Prefetch("replies", queryset=approved_replies)
+        )
+        return ctx
+
+
+class AboutPage(Page):
+    mission_statement = models.TextField()
+    body = RichTextField(blank=True)
+    featured_author = models.ForeignKey(
+        "authors.Author", null=True, blank=True, on_delete=SET_NULL, related_name="+"
+    )
+
+    parent_page_types = ["blog.HomePage"]
+    subpage_types: list[str] = []
+
+    content_panels = Page.content_panels + [
+        FieldPanel("mission_statement"),
+        FieldPanel("body"),
+        FieldPanel("featured_author"),
+    ]
diff --git a/apps/blog/tests/__init__.py b/apps/blog/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/blog/tests/factories.py b/apps/blog/tests/factories.py
new file mode 100644
index 0000000..c3666d3
--- /dev/null
+++ b/apps/blog/tests/factories.py
@@ -0,0 +1,64 @@
+import factory
+import wagtail_factories
+from django.utils import timezone
+from taggit.models import Tag
+from wagtail.models import Page
+
+from apps.authors.models import Author
+from apps.blog.models import ArticleIndexPage, ArticlePage, HomePage, TagMetadata
+from apps.legal.models import LegalIndexPage, LegalPage
+
+
+class AuthorFactory(factory.django.DjangoModelFactory):
+    class Meta:
+        model = Author
+
+    name = factory.Sequence(lambda n: f"Author {n}")
+    slug = factory.Sequence(lambda n: f"author-{n}")
+
+
+class HomePageFactory(wagtail_factories.PageFactory):
+    class Meta:
+        model = HomePage
+
+
+class ArticleIndexPageFactory(wagtail_factories.PageFactory):
+    class Meta:
+        model = ArticleIndexPage
+
+
+class ArticlePageFactory(wagtail_factories.PageFactory):
+    class Meta:
+        model = ArticlePage
+
+    title = factory.Sequence(lambda n: f"Article {n}")
+    slug = factory.Sequence(lambda n: f"article-{n}")
+    author = factory.SubFactory(AuthorFactory)
+    summary = "Summary"
+    body = [("rich_text", "<p>Hello world</p>")]
+    first_published_at = factory.LazyFunction(timezone.now)
+
+
+class LegalIndexPageFactory(wagtail_factories.PageFactory):
+    class Meta:
+        model = LegalIndexPage
+
+
+class LegalPageFactory(wagtail_factories.PageFactory):
+    class Meta:
+        model = LegalPage
+
+    title = factory.Sequence(lambda n: f"Legal {n}")
+    slug = factory.Sequence(lambda n: f"legal-{n}")
+    body = "<p>Body</p>"
+    last_updated = factory.Faker("date_object")
+
+
+def root_page():
+    return Page.get_first_root_node()
+
+
+def create_tag_with_meta(name: str, colour: str = "neutral"):
+    tag, _ = Tag.objects.get_or_create(name=name, slug=name)
+    TagMetadata.objects.get_or_create(tag=tag, defaults={"colour": colour})
+    return tag
diff --git a/apps/blog/tests/test_feeds.py b/apps/blog/tests/test_feeds.py
new file mode 100644
index 0000000..b1112f0
--- /dev/null
+++ b/apps/blog/tests/test_feeds.py
@@ -0,0 +1,34 @@
+import pytest
+from django.test import override_settings
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+
+
+@pytest.mark.django_db
+def test_feed_endpoint(client):
+    resp = client.get("/feed/")
+    assert resp.status_code == 200
+    assert resp["Content-Type"].startswith("application/rss+xml")
+
+
+@pytest.mark.django_db
+@override_settings(WAGTAILADMIN_BASE_URL="http://wrong-host.example")
+def test_feed_uses_request_host_for_item_links(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="Feed Article",
+        slug="feed-article",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>Body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.get("/feed/")
+    body = resp.content.decode()
+    assert resp.status_code == 200
+    assert "http://localhost/articles/feed-article/" in body
diff --git a/apps/blog/tests/test_feeds_more.py b/apps/blog/tests/test_feeds_more.py
new file mode 100644
index 0000000..68da99d
--- /dev/null
+++ b/apps/blog/tests/test_feeds_more.py
@@ -0,0 +1,18 @@
+import pytest
+
+from apps.blog.feeds import AllArticlesFeed
+
+
+@pytest.mark.django_db
+def test_all_feed_methods(article_page):
+    feed = AllArticlesFeed()
+    assert feed.item_title(article_page) == article_page.title
+    assert article_page.summary in feed.item_description(article_page)
+    assert article_page.author.name == feed.item_author_name(article_page)
+    assert feed.item_link(article_page).startswith("http")
+
+
+@pytest.mark.django_db
+def test_tag_feed_not_found(client):
+    resp = client.get("/feed/tag/does-not-exist/")
+    assert resp.status_code == 404
diff --git a/apps/blog/tests/test_models.py b/apps/blog/tests/test_models.py
new file mode 100644
index 0000000..662c62e
--- /dev/null
+++ b/apps/blog/tests/test_models.py
@@ -0,0 +1,42 @@
+import pytest
+from django.db import IntegrityError
+from taggit.models import Tag
+
+from apps.blog.models import ArticleIndexPage, ArticlePage, HomePage, TagMetadata
+from apps.blog.tests.factories import AuthorFactory
+
+
+@pytest.mark.django_db
+def test_home_page_creation(home_page):
+    assert HomePage.objects.count() == 1
+
+
+@pytest.mark.django_db
+def test_article_index_parent_restriction():
+    assert ArticleIndexPage.parent_page_types == ["blog.HomePage"]
+
+
+@pytest.mark.django_db
+def test_article_compute_read_time_excludes_code(home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="A",
+        slug="a",
+        author=author,
+        summary="s",
+        body=[("rich_text", "<p>one two three</p>"), ("code", {"language": "python", "raw_code": "x y z"})],
+    )
+    index.add_child(instance=article)
+    article.save()
+    assert article.read_time_mins == 1
+
+
+@pytest.mark.django_db
+def test_tag_metadata_css_and_uniqueness():
+    tag = Tag.objects.create(name="llms", slug="llms")
+    meta = TagMetadata.objects.create(tag=tag, colour="cyan")
+    assert meta.get_css_classes()["bg"].startswith("bg-cyan")
+    with pytest.raises(IntegrityError):
+        TagMetadata.objects.create(tag=tag, colour="pink")
diff --git a/apps/blog/tests/test_more_models.py b/apps/blog/tests/test_more_models.py
new file mode 100644
index 0000000..75e0e8e
--- /dev/null
+++ b/apps/blog/tests/test_more_models.py
@@ -0,0 +1,27 @@
+import pytest
+
+from apps.blog.models import TagMetadata
+
+
+@pytest.mark.django_db
+def test_home_context_lists_articles(home_page, article_page):
+    ctx = home_page.get_context(type("Req", (), {"GET": {}})())
+    assert "latest_articles" in ctx
+
+
+@pytest.mark.django_db
+def test_index_context_handles_page_values(article_index, article_page, rf):
+    request = rf.get("/", {"page": "notanumber"})
+    ctx = article_index.get_context(request)
+    assert ctx["articles"].number == 1
+
+
+@pytest.mark.django_db
+def test_get_related_articles_fallback(article_page, article_index):
+    related = article_page.get_related_articles()
+    assert isinstance(related, list)
+
+
+def test_tag_metadata_fallback_classes():
+    css = TagMetadata.get_fallback_css()
+    assert css["bg"].startswith("bg-")
diff --git a/apps/blog/tests/test_seo.py b/apps/blog/tests/test_seo.py
new file mode 100644
index 0000000..16efae9
--- /dev/null
+++ b/apps/blog/tests/test_seo.py
@@ -0,0 +1,35 @@
+import pytest
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+
+
+@pytest.mark.django_db
+def test_article_page_renders_core_seo_meta(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="SEO Article",
+        slug="seo-article",
+        author=author,
+        summary="Summary content",
+        body=[("rich_text", "<p>Body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.get("/articles/seo-article/")
+    html = resp.content.decode()
+    assert resp.status_code == 200
+    assert '<link rel="canonical" href="http' in html
+    assert 'property="og:type" content="article"' in html
+    assert 'name="twitter:card" content="summary_large_image"' in html
+
+
+@pytest.mark.django_db
+def test_homepage_renders_website_og_type(client, home_page):
+    resp = client.get("/")
+    html = resp.content.decode()
+    assert resp.status_code == 200
+    assert 'property="og:type" content="website"' in html
diff --git a/apps/blog/tests/test_views.py b/apps/blog/tests/test_views.py
new file mode 100644
index 0000000..d30a212
--- /dev/null
+++ b/apps/blog/tests/test_views.py
@@ -0,0 +1,159 @@
+import pytest
+from taggit.models import Tag
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+from apps.comments.models import Comment
+
+
+@pytest.mark.django_db
+def test_homepage_render(client, home_page):
+    resp = client.get("/")
+    assert resp.status_code == 200
+
+
+@pytest.mark.django_db
+def test_article_index_pagination_and_tag_filter(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    for n in range(14):
+        article = ArticlePage(
+            title=f"A{n}",
+            slug=f"a{n}",
+            author=author,
+            summary="summary",
+            body=[("rich_text", "<p>body</p>")],
+        )
+        index.add_child(instance=article)
+        article.save_revision().publish()
+
+    resp = client.get("/articles/?page=2")
+    assert resp.status_code == 200
+    assert resp.context["articles"].number == 2
+    assert "Pagination" in resp.content.decode()
+
+
+@pytest.mark.django_db
+def test_article_page_related_context(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    main = ArticlePage(
+        title="Main",
+        slug="main",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>body</p>")],
+    )
+    index.add_child(instance=main)
+    main.save_revision().publish()
+
+    related = ArticlePage(
+        title="Related",
+        slug="related",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>body</p>")],
+    )
+    index.add_child(instance=related)
+    related.save_revision().publish()
+
+    resp = client.get("/articles/main/")
+    assert resp.status_code == 200
+    assert "related_articles" in resp.context
+
+
+@pytest.mark.django_db
+def test_newsletter_forms_render_in_nav_and_footer(client, home_page):
+    resp = client.get("/")
+    html = resp.content.decode()
+    assert resp.status_code == 200
+    assert 'name="source" value="nav"' in html
+    assert 'name="source" value="footer"' in html
+
+
+@pytest.mark.django_db
+def test_article_page_renders_share_links_and_newsletter_form(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="Main",
+        slug="main",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.get("/articles/main/")
+    html = resp.content.decode()
+    assert resp.status_code == 200
+    assert "Share on X" in html
+    assert "Share on LinkedIn" in html
+    assert 'data-copy-link' in html
+    assert 'name="source" value="article"' in html
+
+
+@pytest.mark.django_db
+def test_article_page_renders_approved_comments_and_reply_form(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="Main",
+        slug="main",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+    comment = Comment.objects.create(
+        article=article,
+        author_name="A",
+        author_email="a@example.com",
+        body="Top level",
+        is_approved=True,
+    )
+    Comment.objects.create(
+        article=article,
+        parent=comment,
+        author_name="B",
+        author_email="b@example.com",
+        body="Reply",
+        is_approved=True,
+    )
+
+    resp = client.get("/articles/main/")
+    html = resp.content.decode()
+    assert resp.status_code == 200
+    assert "Top level" in html
+    assert "Reply" in html
+    assert f'name="parent_id" value="{comment.id}"' in html
+
+
+@pytest.mark.django_db
+def test_article_index_renders_tag_filter_controls(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="Main",
+        slug="main",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+    tag = Tag.objects.create(name="TagOne", slug="tag-one")
+    article.tags.add(tag)
+    article.save_revision().publish()
+
+    resp = client.get("/articles/")
+    html = resp.content.decode()
+    assert resp.status_code == 200
+    assert "/articles/?tag=tag-one" in html
diff --git a/apps/blog/wagtail_hooks.py b/apps/blog/wagtail_hooks.py
new file mode 100644
index 0000000..0dddec4
--- /dev/null
+++ b/apps/blog/wagtail_hooks.py
@@ -0,0 +1,13 @@
+from wagtail.snippets.models import register_snippet
+from wagtail.snippets.views.snippets import SnippetViewSet
+
+from apps.blog.models import TagMetadata
+
+
+class TagMetadataViewSet(SnippetViewSet):
+    model = TagMetadata
+    icon = "tag"
+    list_display = ["tag", "colour"]
+
+
+register_snippet(TagMetadataViewSet)
diff --git a/apps/comments/__init__.py b/apps/comments/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/comments/apps.py b/apps/comments/apps.py
new file mode 100644
index 0000000..338c0b0
--- /dev/null
+++ b/apps/comments/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class CommentsConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.comments"
diff --git a/apps/comments/forms.py b/apps/comments/forms.py
new file mode 100644
index 0000000..255d67c
--- /dev/null
+++ b/apps/comments/forms.py
@@ -0,0 +1,19 @@
+from django import forms
+
+from apps.comments.models import Comment
+
+
+class CommentForm(forms.ModelForm):
+    honeypot = forms.CharField(required=False)
+    article_id = forms.IntegerField(widget=forms.HiddenInput)
+    parent_id = forms.IntegerField(required=False, widget=forms.HiddenInput)
+
+    class Meta:
+        model = Comment
+        fields = ["author_name", "author_email", "body"]
+
+    def clean_body(self):
+        body = self.cleaned_data["body"]
+        if not body.strip():
+            raise forms.ValidationError("Comment body is required.")
+        return body
diff --git a/apps/comments/management/__init__.py b/apps/comments/management/__init__.py
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/apps/comments/management/__init__.py
@@ -0,0 +1 @@
+
diff --git a/apps/comments/management/commands/__init__.py b/apps/comments/management/commands/__init__.py
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/apps/comments/management/commands/__init__.py
@@ -0,0 +1 @@
+
diff --git a/apps/comments/management/commands/purge_old_comment_data.py b/apps/comments/management/commands/purge_old_comment_data.py
new file mode 100644
index 0000000..73b17bf
--- /dev/null
+++ b/apps/comments/management/commands/purge_old_comment_data.py
@@ -0,0 +1,31 @@
+from __future__ import annotations
+
+from datetime import timedelta
+
+from django.core.management.base import BaseCommand
+from django.utils import timezone
+
+from apps.comments.models import Comment
+
+
+class Command(BaseCommand):
+    help = "Nullify comment personal data for comments older than the retention window."
+
+    def add_arguments(self, parser):
+        parser.add_argument(
+            "--months",
+            type=int,
+            default=24,
+            help="Retention window in months before personal data is purged (default: 24).",
+        )
+
+    def handle(self, *args, **options):
+        months = options["months"]
+        cutoff = timezone.now() - timedelta(days=30 * months)
+
+        purged = (
+            Comment.objects.filter(created_at__lt=cutoff)
+            .exclude(author_email="")
+            .update(author_email="", ip_address=None)
+        )
+        self.stdout.write(self.style.SUCCESS(f"Purged personal data for {purged} comment(s)."))
diff --git a/apps/comments/migrations/0001_initial.py b/apps/comments/migrations/0001_initial.py
new file mode 100644
index 0000000..af46b79
--- /dev/null
+++ b/apps/comments/migrations/0001_initial.py
@@ -0,0 +1,30 @@
+# Generated by Django 5.2.11 on 2026-02-28 11:42
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('blog', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='Comment',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('author_name', models.CharField(max_length=100)),
+                ('author_email', models.EmailField(max_length=254)),
+                ('body', models.TextField(max_length=2000)),
+                ('is_approved', models.BooleanField(default=False)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('ip_address', models.GenericIPAddressField(blank=True, null=True)),
+                ('article', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='comments', to='blog.articlepage')),
+                ('parent', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, related_name='replies', to='comments.comment')),
+            ],
+        ),
+    ]
diff --git a/apps/comments/migrations/__init__.py b/apps/comments/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/comments/models.py b/apps/comments/models.py
new file mode 100644
index 0000000..5689d97
--- /dev/null
+++ b/apps/comments/models.py
@@ -0,0 +1,25 @@
+from __future__ import annotations
+
+from django.core.exceptions import ValidationError
+from django.db import models
+
+
+class Comment(models.Model):
+    article = models.ForeignKey("blog.ArticlePage", on_delete=models.CASCADE, related_name="comments")
+    parent = models.ForeignKey("self", null=True, blank=True, on_delete=models.CASCADE, related_name="replies")
+    author_name = models.CharField(max_length=100)
+    author_email = models.EmailField()
+    body = models.TextField(max_length=2000)
+    is_approved = models.BooleanField(default=False)
+    created_at = models.DateTimeField(auto_now_add=True)
+    ip_address = models.GenericIPAddressField(null=True, blank=True)
+
+    def clean(self) -> None:
+        if self.parent and self.parent.parent_id is not None:
+            raise ValidationError("Replies cannot be nested beyond one level.")
+
+    def get_absolute_url(self):
+        return f"{self.article.url}#comment-{self.pk}"
+
+    def __str__(self) -> str:
+        return f"Comment by {self.author_name}"
diff --git a/apps/comments/tests/__init__.py b/apps/comments/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/comments/tests/test_admin.py b/apps/comments/tests/test_admin.py
new file mode 100644
index 0000000..653e6ee
--- /dev/null
+++ b/apps/comments/tests/test_admin.py
@@ -0,0 +1,81 @@
+import pytest
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+from apps.comments.models import Comment
+from apps.comments.wagtail_hooks import ApproveCommentBulkAction, CommentViewSet
+
+
+@pytest.mark.django_db
+def test_comment_viewset_annotates_pending_in_article(rf, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(title="A", slug="a", author=author, summary="s", body=[("rich_text", "<p>body</p>")])
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    pending = Comment.objects.create(
+        article=article,
+        author_name="Pending",
+        author_email="pending@example.com",
+        body="Awaiting moderation",
+        is_approved=False,
+    )
+    Comment.objects.create(
+        article=article,
+        author_name="Pending2",
+        author_email="pending2@example.com",
+        body="Awaiting moderation too",
+        is_approved=False,
+    )
+    Comment.objects.create(
+        article=article,
+        author_name="Approved",
+        author_email="approved@example.com",
+        body="Already approved",
+        is_approved=True,
+    )
+
+    viewset = CommentViewSet()
+    qs = viewset.get_queryset(rf.get("/cms/snippets/comments/comment/"))
+    annotated = qs.get(pk=pending.pk)
+
+    assert annotated.pending_in_article == 2
+
+
+@pytest.mark.django_db
+def test_bulk_approve_action_marks_selected_pending_comments_as_approved(home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(title="A", slug="a", author=author, summary="s", body=[("rich_text", "<p>body</p>")])
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    pending = Comment.objects.create(
+        article=article,
+        author_name="Pending",
+        author_email="pending@example.com",
+        body="Awaiting moderation",
+        is_approved=False,
+    )
+    approved = Comment.objects.create(
+        article=article,
+        author_name="Approved",
+        author_email="approved@example.com",
+        body="Already approved",
+        is_approved=True,
+    )
+
+    class _Context:
+        model = Comment
+
+    updated, child_updates = ApproveCommentBulkAction.execute_action([pending, approved], self=_Context())
+    pending.refresh_from_db()
+    approved.refresh_from_db()
+
+    assert updated == 1
+    assert child_updates == 0
+    assert pending.is_approved is True
+    assert approved.is_approved is True
diff --git a/apps/comments/tests/test_commands.py b/apps/comments/tests/test_commands.py
new file mode 100644
index 0000000..7e87e44
--- /dev/null
+++ b/apps/comments/tests/test_commands.py
@@ -0,0 +1,40 @@
+from datetime import timedelta
+
+import pytest
+from django.core.management import call_command
+from django.utils import timezone
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+from apps.comments.models import Comment
+
+
+@pytest.mark.django_db
+def test_purge_old_comment_data_clears_personal_fields(home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="Article",
+        slug="article",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    old_comment = Comment.objects.create(
+        article=article,
+        author_name="Old",
+        author_email="old@example.com",
+        body="legacy",
+        ip_address="127.0.0.1",
+    )
+    Comment.objects.filter(pk=old_comment.pk).update(created_at=timezone.now() - timedelta(days=800))
+
+    call_command("purge_old_comment_data")
+
+    old_comment.refresh_from_db()
+    assert old_comment.author_email == ""
+    assert old_comment.ip_address is None
diff --git a/apps/comments/tests/test_models.py b/apps/comments/tests/test_models.py
new file mode 100644
index 0000000..94e27b9
--- /dev/null
+++ b/apps/comments/tests/test_models.py
@@ -0,0 +1,40 @@
+import pytest
+from django.core.exceptions import ValidationError
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+from apps.comments.models import Comment
+
+
+def create_article(home):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(title="A", slug="a", author=author, summary="s", body=[("rich_text", "<p>body</p>")])
+    index.add_child(instance=article)
+    article.save_revision().publish()
+    return article
+
+
+@pytest.mark.django_db
+def test_comment_defaults_and_absolute_url(home_page):
+    article = create_article(home_page)
+    comment = Comment.objects.create(article=article, author_name="N", author_email="n@example.com", body="hello")
+    assert comment.is_approved is False
+    assert comment.get_absolute_url().endswith(f"#comment-{comment.id}")
+
+
+@pytest.mark.django_db
+def test_reply_depth_validation(home_page):
+    article = create_article(home_page)
+    parent = Comment.objects.create(article=article, author_name="P", author_email="p@example.com", body="p")
+    child = Comment.objects.create(
+        article=article,
+        author_name="C",
+        author_email="c@example.com",
+        body="c",
+        parent=parent,
+    )
+    nested = Comment(article=article, author_name="X", author_email="x@example.com", body="x", parent=child)
+    with pytest.raises(ValidationError):
+        nested.clean()
diff --git a/apps/comments/tests/test_more.py b/apps/comments/tests/test_more.py
new file mode 100644
index 0000000..94fd369
--- /dev/null
+++ b/apps/comments/tests/test_more.py
@@ -0,0 +1,26 @@
+import pytest
+from django.core.cache import cache
+
+from apps.comments.forms import CommentForm
+
+
+@pytest.mark.django_db
+def test_comment_form_rejects_blank_body():
+    form = CommentForm(data={"author_name": "A", "author_email": "a@a.com", "body": "   ", "article_id": 1})
+    assert not form.is_valid()
+
+
+@pytest.mark.django_db
+def test_comment_rate_limit(client, article_page):
+    cache.clear()
+    payload = {
+        "article_id": article_page.id,
+        "author_name": "T",
+        "author_email": "t@example.com",
+        "body": "Hi",
+        "honeypot": "",
+    }
+    for _ in range(3):
+        client.post("/comments/post/", payload)
+    resp = client.post("/comments/post/", payload)
+    assert resp.status_code == 429
diff --git a/apps/comments/tests/test_views.py b/apps/comments/tests/test_views.py
new file mode 100644
index 0000000..d55b8ba
--- /dev/null
+++ b/apps/comments/tests/test_views.py
@@ -0,0 +1,160 @@
+import pytest
+from django.core.cache import cache
+from django.test import override_settings
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+from apps.comments.models import Comment
+
+
+@pytest.mark.django_db
+def test_comment_post_flow(client, home_page):
+    cache.clear()
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(title="A", slug="a", author=author, summary="s", body=[("rich_text", "<p>body</p>")])
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.post(
+        "/comments/post/",
+        {
+            "article_id": article.id,
+            "author_name": "Test",
+            "author_email": "test@example.com",
+            "body": "Hello",
+            "honeypot": "",
+        },
+    )
+    assert resp.status_code == 302
+    assert resp["Location"].endswith("?commented=1")
+    assert Comment.objects.count() == 1
+
+
+@pytest.mark.django_db
+def test_comment_post_rejected_when_comments_disabled(client, home_page):
+    cache.clear()
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="A",
+        slug="a",
+        author=author,
+        summary="s",
+        body=[("rich_text", "<p>body</p>")],
+        comments_enabled=False,
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.post(
+        "/comments/post/",
+        {
+            "article_id": article.id,
+            "author_name": "Test",
+            "author_email": "test@example.com",
+            "body": "Hello",
+            "honeypot": "",
+        },
+    )
+    assert resp.status_code == 404
+    assert Comment.objects.count() == 0
+
+
+@pytest.mark.django_db
+def test_invalid_comment_post_rerenders_form_with_errors(client, home_page):
+    cache.clear()
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(title="A", slug="a", author=author, summary="s", body=[("rich_text", "<p>body</p>")])
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.post(
+        "/comments/post/",
+        {
+            "article_id": article.id,
+            "author_name": "Test",
+            "author_email": "test@example.com",
+            "body": "   ",
+            "honeypot": "",
+        },
+    )
+
+    assert resp.status_code == 200
+    assert b'aria-label="Comment form errors"' in resp.content
+    assert b'value="Test"' in resp.content
+    assert b"test@example.com" in resp.content
+    assert Comment.objects.count() == 0
+
+
+@pytest.mark.django_db
+def test_comment_reply_depth_is_enforced(client, home_page):
+    cache.clear()
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(title="A", slug="a", author=author, summary="s", body=[("rich_text", "<p>body</p>")])
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    parent = Comment.objects.create(
+        article=article,
+        author_name="Parent",
+        author_email="p@example.com",
+        body="Parent",
+        is_approved=True,
+    )
+    child = Comment.objects.create(
+        article=article,
+        parent=parent,
+        author_name="Child",
+        author_email="c@example.com",
+        body="Child",
+        is_approved=True,
+    )
+
+    resp = client.post(
+        "/comments/post/",
+        {
+            "article_id": article.id,
+            "parent_id": child.id,
+            "author_name": "TooDeep",
+            "author_email": "deep@example.com",
+            "body": "Nope",
+            "honeypot": "",
+        },
+    )
+    assert resp.status_code == 200
+    assert b"Reply depth exceeds the allowed limit" in resp.content
+    assert Comment.objects.count() == 2
+
+
+@pytest.mark.django_db
+@override_settings(TRUSTED_PROXY_IPS=[])
+def test_comment_uses_remote_addr_when_proxy_untrusted(client, home_page):
+    cache.clear()
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(title="A", slug="a", author=author, summary="s", body=[("rich_text", "<p>body</p>")])
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    client.post(
+        "/comments/post/",
+        {
+            "article_id": article.id,
+            "author_name": "Test",
+            "author_email": "test@example.com",
+            "body": "Hello",
+            "honeypot": "",
+        },
+        REMOTE_ADDR="10.0.0.1",
+        HTTP_X_FORWARDED_FOR="203.0.113.7",
+    )
+    comment = Comment.objects.get()
+    assert comment.ip_address == "10.0.0.1"
diff --git a/apps/comments/urls.py b/apps/comments/urls.py
new file mode 100644
index 0000000..861e88c
--- /dev/null
+++ b/apps/comments/urls.py
@@ -0,0 +1,7 @@
+from django.urls import path
+
+from apps.comments.views import CommentCreateView
+
+urlpatterns = [
+    path("post/", CommentCreateView.as_view(), name="comment_post"),
+]
diff --git a/apps/comments/views.py b/apps/comments/views.py
new file mode 100644
index 0000000..5e908a2
--- /dev/null
+++ b/apps/comments/views.py
@@ -0,0 +1,63 @@
+from __future__ import annotations
+
+from django.conf import settings
+from django.contrib import messages
+from django.core.cache import cache
+from django.core.exceptions import ValidationError
+from django.http import HttpResponse
+from django.shortcuts import get_object_or_404, redirect, render
+from django.views import View
+
+from apps.blog.models import ArticlePage
+from apps.comments.forms import CommentForm
+from apps.comments.models import Comment
+
+
+def client_ip_from_request(request) -> str:
+    remote_addr = request.META.get("REMOTE_ADDR", "").strip()
+    trusted_proxies = getattr(settings, "TRUSTED_PROXY_IPS", [])
+    x_forwarded_for = request.META.get("HTTP_X_FORWARDED_FOR", "")
+    if remote_addr in trusted_proxies and x_forwarded_for:
+        return x_forwarded_for.split(",")[0].strip()
+    return remote_addr
+
+
+class CommentCreateView(View):
+    def _render_article_with_errors(self, request, article, form):
+        context = article.get_context(request)
+        context["page"] = article
+        context["comment_form"] = form
+        return render(request, "blog/article_page.html", context, status=200)
+
+    def post(self, request):
+        ip = client_ip_from_request(request)
+        key = f"comment-rate:{ip}"
+        count = cache.get(key, 0)
+        if count >= 3:
+            return HttpResponse(status=429)
+        cache.set(key, count + 1, timeout=60)
+
+        form = CommentForm(request.POST)
+        article = get_object_or_404(ArticlePage, pk=request.POST.get("article_id"))
+        if not article.comments_enabled:
+            return HttpResponse(status=404)
+
+        if form.is_valid():
+            if form.cleaned_data.get("honeypot"):
+                return redirect(f"{article.url}?commented=1")
+            comment = form.save(commit=False)
+            comment.article = article
+            parent_id = form.cleaned_data.get("parent_id")
+            if parent_id:
+                comment.parent = Comment.objects.filter(pk=parent_id, article=article).first()
+            comment.ip_address = ip or None
+            try:
+                comment.full_clean()
+            except ValidationError:
+                form.add_error(None, "Reply depth exceeds the allowed limit")
+                return self._render_article_with_errors(request, article, form)
+            comment.save()
+            messages.success(request, "Your comment is awaiting moderation")
+            return redirect(f"{article.url}?commented=1")
+
+        return self._render_article_with_errors(request, article, form)
diff --git a/apps/comments/wagtail_hooks.py b/apps/comments/wagtail_hooks.py
new file mode 100644
index 0000000..c30ac32
--- /dev/null
+++ b/apps/comments/wagtail_hooks.py
@@ -0,0 +1,72 @@
+from typing import Any, cast
+
+from django.db.models import Count, Q
+from django.utils.translation import gettext_lazy as _
+from django.utils.translation import ngettext
+from wagtail import hooks
+from wagtail.admin.ui.tables import BooleanColumn
+from wagtail.snippets.bulk_actions.snippet_bulk_action import SnippetBulkAction
+from wagtail.snippets.models import register_snippet
+from wagtail.snippets.permissions import get_permission_name
+from wagtail.snippets.views.snippets import SnippetViewSet
+
+from apps.comments.models import Comment
+
+
+class ApproveCommentBulkAction(SnippetBulkAction):
+    display_name = _("Approve")
+    action_type = "approve"
+    aria_label = _("Approve selected comments")
+    template_name = "comments/confirm_bulk_approve.html"
+    action_priority = 20
+    models = [Comment]
+
+    def check_perm(self, snippet):
+        if getattr(self, "can_change_items", None) is None:
+            self.can_change_items = self.request.user.has_perm(get_permission_name("change", self.model))
+        return self.can_change_items
+
+    @classmethod
+    def execute_action(cls, objects, **kwargs):
+        updated = kwargs["self"].model.objects.filter(pk__in=[obj.pk for obj in objects], is_approved=False).update(
+            is_approved=True
+        )
+        return updated, 0
+
+    def get_success_message(self, num_parent_objects, num_child_objects):
+        return ngettext(
+            "%(count)d comment approved.",
+            "%(count)d comments approved.",
+            num_parent_objects,
+        ) % {"count": num_parent_objects}
+
+
+class CommentViewSet(SnippetViewSet):
+    model = Comment
+    queryset = Comment.objects.all()
+    icon = "comment"
+    list_display = ["author_name", "article", BooleanColumn("is_approved"), "pending_in_article", "created_at"]
+    list_filter = ["is_approved"]
+    search_fields = ["author_name", "body"]
+    add_to_admin_menu = True
+
+    def get_queryset(self, request):
+        base_qs = self.model.objects.all().select_related("article", "parent")
+        # mypy-django-plugin currently crashes on QuerySet.annotate() in this file.
+        typed_qs = cast(Any, base_qs)
+        return typed_qs.annotate(
+            pending_in_article=Count(
+                "article__comments",
+                filter=Q(article__comments__is_approved=False),
+                distinct=True,
+            )
+        )
+
+    def pending_in_article(self, obj):
+        return obj.pending_in_article
+
+    pending_in_article.short_description = "Pending (article)"  # type: ignore[attr-defined]
+
+
+register_snippet(CommentViewSet)
+hooks.register("register_bulk_action", ApproveCommentBulkAction)
diff --git a/apps/core/__init__.py b/apps/core/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/core/apps.py b/apps/core/apps.py
new file mode 100644
index 0000000..ab0051e
--- /dev/null
+++ b/apps/core/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class CoreConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.core"
diff --git a/apps/core/consent.py b/apps/core/consent.py
new file mode 100644
index 0000000..8737a1d
--- /dev/null
+++ b/apps/core/consent.py
@@ -0,0 +1,59 @@
+from __future__ import annotations
+
+import time
+from dataclasses import dataclass
+from urllib.parse import parse_qs, urlencode
+
+from django.conf import settings
+
+CONSENT_COOKIE_NAME = "nhAiConsent"
+
+
+@dataclass
+class ConsentState:
+    analytics: bool = False
+    advertising: bool = False
+    policy_version: int = 0
+    timestamp: int = 0
+
+    @property
+    def requires_prompt(self) -> bool:
+        return self.policy_version != settings.CONSENT_POLICY_VERSION
+
+
+class ConsentService:
+    @staticmethod
+    def get_consent(request) -> ConsentState:
+        raw = request.COOKIES.get(CONSENT_COOKIE_NAME, "")
+        if not raw:
+            return ConsentState()
+
+        try:
+            data = {k: v[0] for k, v in parse_qs(raw).items()}
+            return ConsentState(
+                analytics=data.get("a", "0") == "1",
+                advertising=data.get("d", "0") == "1",
+                policy_version=int(data.get("v", "0")),
+                timestamp=int(data.get("ts", "0")),
+            )
+        except (ValueError, AttributeError):
+            return ConsentState()
+
+    @staticmethod
+    def set_consent(response, *, analytics: bool, advertising: bool) -> None:
+        payload = urlencode(
+            {
+                "a": int(analytics),
+                "d": int(advertising),
+                "v": settings.CONSENT_POLICY_VERSION,
+                "ts": int(time.time()),
+            }
+        )
+        response.set_cookie(
+            CONSENT_COOKIE_NAME,
+            payload,
+            max_age=60 * 60 * 24 * 365,
+            httponly=False,
+            samesite="Lax",
+            secure=not settings.DEBUG,
+        )
diff --git a/apps/core/context_processors.py b/apps/core/context_processors.py
new file mode 100644
index 0000000..8ce6231
--- /dev/null
+++ b/apps/core/context_processors.py
@@ -0,0 +1,9 @@
+from wagtail.models import Site
+
+from apps.core.models import SiteSettings
+
+
+def site_settings(request):
+    site = Site.find_for_request(request)
+    settings_obj = SiteSettings.for_site(site) if site else None
+    return {"site_settings": settings_obj}
diff --git a/apps/core/management/__init__.py b/apps/core/management/__init__.py
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/apps/core/management/__init__.py
@@ -0,0 +1 @@
+
diff --git a/apps/core/management/commands/__init__.py b/apps/core/management/commands/__init__.py
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/apps/core/management/commands/__init__.py
@@ -0,0 +1 @@
+
diff --git a/apps/core/management/commands/check_content_integrity.py b/apps/core/management/commands/check_content_integrity.py
new file mode 100644
index 0000000..e4088d6
--- /dev/null
+++ b/apps/core/management/commands/check_content_integrity.py
@@ -0,0 +1,42 @@
+from __future__ import annotations
+
+from django.core.management.base import BaseCommand, CommandError
+from django.db.models.functions import Trim
+from wagtail.models import Site
+
+from apps.blog.models import ArticlePage
+from apps.core.models import SiteSettings
+
+
+class Command(BaseCommand):
+    help = "Validate content-integrity constraints for live article pages."
+
+    def handle(self, *args, **options):
+        errors: list[str] = []
+
+        missing_summary = ArticlePage.objects.live().annotate(summary_trimmed=Trim("summary")).filter(
+            summary_trimmed=""
+        )
+        if missing_summary.exists():
+            errors.append(f"{missing_summary.count()} live article(s) have an empty summary.")
+
+        missing_author = ArticlePage.objects.live().filter(author__isnull=True)
+        if missing_author.exists():
+            errors.append(f"{missing_author.count()} live article(s) have no author.")
+
+        default_site = Site.objects.filter(is_default_site=True).first()
+        default_og_image = None
+        if default_site:
+            default_og_image = SiteSettings.for_site(default_site).default_og_image
+
+        if default_og_image is None:
+            missing_hero = ArticlePage.objects.live().filter(hero_image__isnull=True)
+            if missing_hero.exists():
+                errors.append(
+                    f"{missing_hero.count()} live article(s) have no hero image and no site default OG image is set."
+                )
+
+        if errors:
+            raise CommandError("Content integrity check failed: " + " ".join(errors))
+
+        self.stdout.write(self.style.SUCCESS("Content integrity check passed."))
diff --git a/apps/core/management/commands/seed_e2e_content.py b/apps/core/management/commands/seed_e2e_content.py
new file mode 100644
index 0000000..82d1f06
--- /dev/null
+++ b/apps/core/management/commands/seed_e2e_content.py
@@ -0,0 +1,63 @@
+from __future__ import annotations
+
+from django.core.management.base import BaseCommand
+from wagtail.models import Page, Site
+
+from apps.authors.models import Author
+from apps.blog.models import ArticleIndexPage, ArticlePage, HomePage
+
+
+class Command(BaseCommand):
+    help = "Seed deterministic content for nightly Playwright E2E checks."
+
+    def handle(self, *args, **options):
+        root = Page.get_first_root_node()
+
+        home = HomePage.objects.child_of(root).first()
+        if home is None:
+            home = HomePage(title="Nightly Home", slug="nightly-home")
+            root.add_child(instance=home)
+            home.save_revision().publish()
+
+        article_index = ArticleIndexPage.objects.child_of(home).filter(slug="articles").first()
+        if article_index is None:
+            article_index = ArticleIndexPage(title="Articles", slug="articles")
+            home.add_child(instance=article_index)
+            article_index.save_revision().publish()
+
+        author, _ = Author.objects.get_or_create(
+            slug="e2e-author",
+            defaults={
+                "name": "E2E Author",
+                "bio": "Seeded nightly test author.",
+            },
+        )
+
+        article = ArticlePage.objects.child_of(article_index).filter(slug="nightly-playwright-journey").first()
+        if article is None:
+            article = ArticlePage(
+                title="Nightly Playwright Journey",
+                slug="nightly-playwright-journey",
+                author=author,
+                summary="Seeded article for nightly browser journey.",
+                body=[("rich_text", "<p>Seeded article body for nightly browser checks.</p>")],
+                comments_enabled=True,
+            )
+            article_index.add_child(instance=article)
+            article.save_revision().publish()
+
+        site, _ = Site.objects.get_or_create(
+            hostname="127.0.0.1",
+            port=8000,
+            defaults={
+                "root_page": home,
+                "is_default_site": True,
+                "site_name": "No Hype AI",
+            },
+        )
+        site.root_page = home
+        site.is_default_site = True
+        site.site_name = "No Hype AI"
+        site.save()
+
+        self.stdout.write(self.style.SUCCESS("Seeded nightly E2E content."))
diff --git a/apps/core/middleware.py b/apps/core/middleware.py
new file mode 100644
index 0000000..a04983f
--- /dev/null
+++ b/apps/core/middleware.py
@@ -0,0 +1,37 @@
+from __future__ import annotations
+
+import secrets
+
+from .consent import ConsentService
+
+
+class ConsentMiddleware:
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        request.consent = ConsentService.get_consent(request)
+        return self.get_response(request)
+
+
+class SecurityHeadersMiddleware:
+    def __init__(self, get_response):
+        self.get_response = get_response
+
+    def __call__(self, request):
+        nonce = secrets.token_urlsafe(16)
+        request.csp_nonce = nonce
+        response = self.get_response(request)
+        response["Content-Security-Policy"] = (
+            f"default-src 'self'; "
+            f"script-src 'self' 'nonce-{nonce}'; "
+            "style-src 'self'; "
+            "img-src 'self' data: blob:; "
+            "font-src 'self'; "
+            "connect-src 'self'; "
+            "object-src 'none'; "
+            "base-uri 'self'; "
+            "frame-ancestors 'self'"
+        )
+        response["Permissions-Policy"] = "camera=(), microphone=(), geolocation=()"
+        return response
diff --git a/apps/core/migrations/0001_initial.py b/apps/core/migrations/0001_initial.py
new file mode 100644
index 0000000..229d6f6
--- /dev/null
+++ b/apps/core/migrations/0001_initial.py
@@ -0,0 +1,29 @@
+# Generated by Django 5.2.11 on 2026-02-28 11:42
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('wagtailcore', '0094_alter_page_locale'),
+        ('wagtailimages', '0027_image_description'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='SiteSettings',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('default_og_image', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='wagtailimages.image')),
+                ('privacy_policy_page', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='+', to='wagtailcore.page')),
+                ('site', models.OneToOneField(editable=False, on_delete=django.db.models.deletion.CASCADE, to='wagtailcore.site')),
+            ],
+            options={
+                'abstract': False,
+            },
+        ),
+    ]
diff --git a/apps/core/migrations/__init__.py b/apps/core/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/core/models.py b/apps/core/models.py
new file mode 100644
index 0000000..68c3e2c
--- /dev/null
+++ b/apps/core/models.py
@@ -0,0 +1,21 @@
+from django.db import models
+from django.db.models import SET_NULL
+from wagtail.contrib.settings.models import BaseSiteSetting, register_setting
+
+
+@register_setting
+class SiteSettings(BaseSiteSetting):
+    default_og_image = models.ForeignKey(
+        "wagtailimages.Image",
+        null=True,
+        blank=True,
+        on_delete=SET_NULL,
+        related_name="+",
+    )
+    privacy_policy_page = models.ForeignKey(
+        "wagtailcore.Page",
+        null=True,
+        blank=True,
+        on_delete=SET_NULL,
+        related_name="+",
+    )
diff --git a/apps/core/templatetags/__init__.py b/apps/core/templatetags/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/core/templatetags/core_tags.py b/apps/core/templatetags/core_tags.py
new file mode 100644
index 0000000..213e3bb
--- /dev/null
+++ b/apps/core/templatetags/core_tags.py
@@ -0,0 +1,30 @@
+from __future__ import annotations
+
+from django import template
+from django.utils.safestring import mark_safe
+from wagtail.models import Site
+
+from apps.blog.models import TagMetadata
+from apps.legal.models import LegalPage
+
+register = template.Library()
+
+
+@register.simple_tag(takes_context=True)
+def get_legal_pages(context):
+    request = context.get("request")
+    site = Site.find_for_request(request) if request else None
+    pages = LegalPage.objects.live().filter(show_in_footer=True)
+    if site:
+        pages = pages.in_site(site)
+    return pages
+
+
+@register.simple_tag
+@register.filter
+def get_tag_css(tag):
+    meta = getattr(tag, "metadata", None)
+    if meta is None:
+        meta = TagMetadata.objects.filter(tag=tag).first()
+    classes = meta.get_css_classes() if meta else TagMetadata.get_fallback_css()
+    return mark_safe(f"{classes['bg']} {classes['text']}")
diff --git a/apps/core/templatetags/seo_tags.py b/apps/core/templatetags/seo_tags.py
new file mode 100644
index 0000000..c5ddb36
--- /dev/null
+++ b/apps/core/templatetags/seo_tags.py
@@ -0,0 +1,58 @@
+from __future__ import annotations
+
+import json
+
+from django import template
+from django.utils.safestring import mark_safe
+from wagtail.images.models import Image
+
+from apps.core.models import SiteSettings
+
+register = template.Library()
+
+
+def _article_image_url(request, article) -> str:
+    site_settings = SiteSettings.for_request(request)
+    image = article.hero_image or site_settings.default_og_image
+    if isinstance(image, Image):
+        rendition = image.get_rendition("fill-1200x630")
+        return request.build_absolute_uri(rendition.url)
+    return ""
+
+
+@register.simple_tag(takes_context=True)
+def canonical_url(context, page=None) -> str:
+    request = context["request"]
+    target = page or context.get("page")
+    if target and hasattr(target, "get_full_url"):
+        return target.get_full_url(request)
+    return request.build_absolute_uri()
+
+
+@register.simple_tag(takes_context=True)
+def article_og_image_url(context, article) -> str:
+    return _article_image_url(context["request"], article)
+
+
+@register.simple_tag(takes_context=True)
+def article_json_ld(context, article):
+    request = context["request"]
+    nonce = getattr(request, "csp_nonce", "")
+    data = {
+        "@context": "https://schema.org",
+        "@type": "Article",
+        "headline": article.title,
+        "author": {"@type": "Person", "name": article.author.name},
+        "datePublished": article.first_published_at.isoformat() if article.first_published_at else "",
+        "dateModified": article.last_published_at.isoformat() if article.last_published_at else "",
+        "description": article.search_description or article.summary,
+        "url": article.get_full_url(request),
+        "image": _article_image_url(request, article),
+    }
+    return mark_safe(
+        '<script type="application/ld+json" nonce="'
+        + nonce
+        + '">'
+        + json.dumps(data, ensure_ascii=True)
+        + "</script>"
+    )
diff --git a/apps/core/tests/__init__.py b/apps/core/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/core/tests/test_commands.py b/apps/core/tests/test_commands.py
new file mode 100644
index 0000000..b7fedb8
--- /dev/null
+++ b/apps/core/tests/test_commands.py
@@ -0,0 +1,30 @@
+import pytest
+from django.core.management import call_command
+from django.core.management.base import CommandError
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+
+
+@pytest.mark.django_db
+def test_check_content_integrity_passes_when_requirements_met(home_page):
+    call_command("check_content_integrity")
+
+
+@pytest.mark.django_db
+def test_check_content_integrity_fails_for_blank_summary(home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="Article",
+        slug="article",
+        author=author,
+        summary="   ",
+        body=[("rich_text", "<p>body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    with pytest.raises(CommandError, match="empty summary"):
+        call_command("check_content_integrity")
diff --git a/apps/core/tests/test_consent.py b/apps/core/tests/test_consent.py
new file mode 100644
index 0000000..1a13643
--- /dev/null
+++ b/apps/core/tests/test_consent.py
@@ -0,0 +1,67 @@
+import pytest
+from django.http import HttpRequest, HttpResponse
+
+from apps.core.consent import CONSENT_COOKIE_NAME, ConsentService
+
+
+@pytest.mark.django_db
+def test_consent_round_trip(rf):
+    request = HttpRequest()
+    response = HttpResponse()
+    ConsentService.set_consent(response, analytics=True, advertising=False)
+    cookie = response.cookies[CONSENT_COOKIE_NAME].value
+    request.COOKIES[CONSENT_COOKIE_NAME] = cookie
+    state = ConsentService.get_consent(request)
+    assert state.analytics is True
+    assert state.advertising is False
+
+
+@pytest.mark.django_db
+def test_consent_post_view(client):
+    resp = client.post("/consent/", {"accept_all": "1"}, follow=False)
+    assert resp.status_code == 302
+    assert CONSENT_COOKIE_NAME in resp.cookies
+
+
+@pytest.mark.django_db
+def test_consent_get_without_cookie_defaults_false():
+    request = HttpRequest()
+    state = ConsentService.get_consent(request)
+    assert state.analytics is False
+    assert state.advertising is False
+    assert state.requires_prompt is True
+
+
+@pytest.mark.django_db
+def test_consent_malformed_cookie_returns_safe_default():
+    request = HttpRequest()
+    request.COOKIES[CONSENT_COOKIE_NAME] = "not=a=valid%%%cookie"
+    state = ConsentService.get_consent(request)
+    assert state.analytics is False
+    assert state.advertising is False
+
+
+@pytest.mark.django_db
+def test_consent_post_preferences(client):
+    resp = client.post("/consent/", {"analytics": "1", "advertising": ""})
+    assert resp.status_code == 302
+    value = resp.cookies[CONSENT_COOKIE_NAME].value
+    assert "a=1" in value
+    assert "d=0" in value
+
+
+@pytest.mark.django_db
+def test_consent_get_method_not_allowed(client):
+    resp = client.get("/consent/")
+    assert resp.status_code == 405
+
+
+@pytest.mark.django_db
+def test_cookie_banner_hides_after_consent(client, home_page):
+    first = client.get("/")
+    assert "id=\"cookie-banner\"" in first.content.decode()
+    consented = client.post("/consent/", {"accept_all": "1"})
+    cookie_value = consented.cookies[CONSENT_COOKIE_NAME].value
+    client.cookies[CONSENT_COOKIE_NAME] = cookie_value
+    second = client.get("/")
+    assert "id=\"cookie-banner\"" not in second.content.decode()
diff --git a/apps/core/tests/test_more.py b/apps/core/tests/test_more.py
new file mode 100644
index 0000000..b430ead
--- /dev/null
+++ b/apps/core/tests/test_more.py
@@ -0,0 +1,50 @@
+
+import pytest
+from django.template import Context
+from django.test import RequestFactory
+from taggit.models import Tag
+from wagtail.models import Site
+
+from apps.core.context_processors import site_settings
+from apps.core.templatetags import core_tags
+from apps.core.templatetags.seo_tags import article_json_ld
+from apps.legal.models import LegalIndexPage, LegalPage
+
+
+@pytest.mark.django_db
+def test_context_processor_returns_sitesettings(home_page):
+    rf = RequestFactory()
+    request = rf.get("/")
+    request.site = Site.find_for_request(request)
+    data = site_settings(request)
+    assert "site_settings" in data
+
+
+@pytest.mark.django_db
+def test_get_tag_css_fallback():
+    tag = Tag.objects.create(name="x", slug="x")
+    value = core_tags.get_tag_css(tag)
+    assert "bg-zinc" in value
+
+
+@pytest.mark.django_db
+def test_get_legal_pages_tag_callable(home_page):
+    legal_index = LegalIndexPage(title="Legal", slug="legal")
+    home_page.add_child(instance=legal_index)
+    legal = LegalPage(title="Privacy", slug="privacy-policy", body="<p>x</p>", last_updated="2026-01-01")
+    legal_index.add_child(instance=legal)
+    legal.save_revision().publish()
+
+    rf = RequestFactory()
+    request = rf.get("/")
+    pages = core_tags.get_legal_pages({"request": request})
+    assert pages.count() >= 1
+
+
+@pytest.mark.django_db
+def test_article_json_ld_contains_headline(article_page, rf):
+    request = rf.get("/")
+    request.site = Site.objects.filter(is_default_site=True).first()
+    result = article_json_ld(Context({"request": request}), article_page)
+    assert "application/ld+json" in result
+    assert article_page.title in result
diff --git a/apps/core/tests/test_nightly_e2e_playwright.py b/apps/core/tests/test_nightly_e2e_playwright.py
new file mode 100644
index 0000000..af38e24
--- /dev/null
+++ b/apps/core/tests/test_nightly_e2e_playwright.py
@@ -0,0 +1,47 @@
+from __future__ import annotations
+
+import os
+
+import pytest
+from playwright.sync_api import expect, sync_playwright
+
+
+@pytest.mark.e2e
+def test_nightly_playwright_journey() -> None:
+    base_url = os.getenv("E2E_BASE_URL")
+    if not base_url:
+        pytest.skip("E2E_BASE_URL is not set")
+
+    base_url = base_url.rstrip("/")
+
+    with sync_playwright() as pw:
+        browser = pw.chromium.launch()
+        page = browser.new_page()
+
+        page.goto(f"{base_url}/", wait_until="networkidle")
+        expect(page.locator("#cookie-banner")).to_be_visible()
+        page.get_by_role("button", name="Toggle theme").click()
+        page.get_by_role("button", name="Accept all").first.click()
+        expect(page.locator("#cookie-banner")).to_have_count(0)
+
+        page.goto(f"{base_url}/articles/", wait_until="networkidle")
+        first_article_link = page.locator("main article a").first
+        expect(first_article_link).to_be_visible()
+        article_href = first_article_link.get_attribute("href")
+        assert article_href
+
+        article_url = article_href if article_href.startswith("http") else f"{base_url}{article_href}"
+        page.goto(article_url, wait_until="networkidle")
+        expect(page.get_by_role("heading", name="Comments")).to_be_visible()
+        expect(page.get_by_role("button", name="Post comment")).to_be_visible()
+
+        page.goto(f"{base_url}/feed/", wait_until="networkidle")
+        feed_content = page.content()
+        assert (
+            "<rss" in feed_content
+            or "<feed" in feed_content
+            or "&lt;rss" in feed_content
+            or "&lt;feed" in feed_content
+        )
+
+        browser.close()
diff --git a/apps/core/tests/test_performance.py b/apps/core/tests/test_performance.py
new file mode 100644
index 0000000..00be558
--- /dev/null
+++ b/apps/core/tests/test_performance.py
@@ -0,0 +1,75 @@
+import pytest
+from taggit.models import Tag
+from wagtail.models import Site
+
+from apps.blog.models import ArticleIndexPage, ArticlePage, HomePage, TagMetadata
+from apps.blog.tests.factories import AuthorFactory
+
+
+def _build_article_tree(home_page: HomePage, count: int = 12):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    tag = Tag.objects.create(name="Bench", slug="bench")
+    TagMetadata.objects.create(tag=tag, colour="cyan")
+
+    for n in range(count):
+        article = ArticlePage(
+            title=f"Article {n}",
+            slug=f"article-{n}",
+            author=author,
+            summary="summary",
+            body=[("rich_text", "<p>body words</p>")],
+        )
+        index.add_child(instance=article)
+        article.tags.add(tag)
+        article.save_revision().publish()
+    return index
+
+
+@pytest.mark.django_db
+def test_homepage_query_budget(rf, home_page, django_assert_num_queries):
+    _build_article_tree(home_page, count=8)
+    request = rf.get("/")
+    request.site = Site.objects.get(is_default_site=True)
+    with django_assert_num_queries(10, exact=False):
+        context = home_page.get_context(request)
+        list(context["latest_articles"])
+        list(context["more_articles"])
+    assert len(context["latest_articles"]) <= 5
+
+
+@pytest.mark.django_db
+def test_article_index_query_budget(rf, home_page, django_assert_num_queries):
+    index = _build_article_tree(home_page, count=12)
+    request = rf.get("/articles/")
+    request.site = Site.objects.get(is_default_site=True)
+    with django_assert_num_queries(12, exact=False):
+        context = index.get_context(request)
+        list(context["articles"])
+        list(context["available_tags"])
+    assert context["paginator"].count == 12
+
+
+@pytest.mark.django_db
+def test_article_read_query_budget(rf, home_page, django_assert_num_queries):
+    index = _build_article_tree(home_page, count=4)
+    article = ArticlePage.objects.child_of(index).live().first()
+    assert article is not None
+    request = rf.get(article.url)
+    request.site = Site.objects.get(is_default_site=True)
+    with django_assert_num_queries(8, exact=False):
+        context = article.get_context(request)
+        list(context["related_articles"])
+        list(context["approved_comments"])
+    assert context["related_articles"] is not None
+
+
+def test_read_time_benchmark(benchmark):
+    author = AuthorFactory.build()
+    body = [("rich_text", "<p>" + "word " * 1000 + "</p>")]
+    article = ArticlePage(title="Bench", slug="bench", author=author, summary="summary", body=body)
+
+    result = benchmark(article._compute_read_time)
+    assert result >= 1
+    assert benchmark.stats.stats.mean < 0.05
diff --git a/apps/core/tests/test_security.py b/apps/core/tests/test_security.py
new file mode 100644
index 0000000..3508317
--- /dev/null
+++ b/apps/core/tests/test_security.py
@@ -0,0 +1,101 @@
+import re
+
+import pytest
+
+from apps.blog.models import ArticleIndexPage, ArticlePage
+from apps.blog.tests.factories import AuthorFactory
+
+
+@pytest.mark.django_db
+def test_security_headers_present(client, home_page):
+    resp = client.get("/")
+    assert resp.status_code == 200
+    assert "Content-Security-Policy" in resp
+    assert "Permissions-Policy" in resp
+    assert "unsafe-inline" not in resp["Content-Security-Policy"]
+    assert "script-src" in resp["Content-Security-Policy"]
+    assert resp["X-Frame-Options"] == "SAMEORIGIN"
+    assert "strict-origin-when-cross-origin" in resp["Referrer-Policy"]
+
+
+@pytest.mark.django_db
+def test_csp_nonce_applied_to_inline_script(client, home_page):
+    resp = client.get("/")
+    csp = resp["Content-Security-Policy"]
+    match = re.search(r"nonce-([^' ;]+)", csp)
+    assert match
+    nonce = match.group(1)
+    html = resp.content.decode()
+    assert f'nonce="{nonce}"' in html
+
+
+@pytest.mark.django_db
+def test_robots_disallows_cms_and_contains_sitemap(client):
+    resp = client.get("/robots.txt")
+    body = resp.content.decode()
+    assert resp.status_code == 200
+    assert "Disallow: /cms/" in body
+    assert "Sitemap:" in body
+
+
+@pytest.mark.django_db
+def test_admin_obscured_path_redirects_to_cms(client):
+    resp = client.get("/admin/")
+    assert resp.status_code == 302
+    assert resp["Location"] == "/cms/"
+
+
+@pytest.mark.django_db
+def test_article_comment_form_contains_csrf_token(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="CSRF Article",
+        slug="csrf-article",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>Body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.get("/articles/csrf-article/")
+    html = resp.content.decode()
+    assert resp.status_code == 200
+    assert "csrfmiddlewaretoken" in html
+
+
+@pytest.mark.django_db
+def test_consent_rejects_open_redirect(client, home_page):
+    resp = client.post(
+        "/consent/",
+        {"reject_all": "1"},
+        HTTP_REFERER="https://evil.example.com/phish",
+    )
+    assert resp.status_code == 302
+    assert resp["Location"] == "/"
+
+
+@pytest.mark.django_db
+def test_article_json_ld_script_has_csp_nonce(client, home_page):
+    index = ArticleIndexPage(title="Articles", slug="articles")
+    home_page.add_child(instance=index)
+    author = AuthorFactory()
+    article = ArticlePage(
+        title="Nonce Article",
+        slug="nonce-article",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>Body</p>")],
+    )
+    index.add_child(instance=article)
+    article.save_revision().publish()
+
+    resp = client.get("/articles/nonce-article/")
+    csp = resp["Content-Security-Policy"]
+    match = re.search(r"nonce-([^' ;]+)", csp)
+    assert match
+    nonce = match.group(1)
+    html = resp.content.decode()
+    assert f'type="application/ld+json" nonce="{nonce}"' in html
diff --git a/apps/core/tests/test_smoke.py b/apps/core/tests/test_smoke.py
new file mode 100644
index 0000000..353204d
--- /dev/null
+++ b/apps/core/tests/test_smoke.py
@@ -0,0 +1,2 @@
+def test_smoke():
+    assert 1 == 1
diff --git a/apps/core/tests/test_tags.py b/apps/core/tests/test_tags.py
new file mode 100644
index 0000000..5ccabb5
--- /dev/null
+++ b/apps/core/tests/test_tags.py
@@ -0,0 +1,15 @@
+import pytest
+
+from apps.legal.models import LegalIndexPage, LegalPage
+
+
+@pytest.mark.django_db
+def test_get_legal_pages_tag(client, home_page):
+    legal_index = LegalIndexPage(title="Legal", slug="legal")
+    home_page.add_child(instance=legal_index)
+    legal = LegalPage(title="Privacy", slug="privacy-policy", last_updated="2026-01-01", body="<p>x</p>")
+    legal_index.add_child(instance=legal)
+    legal.save_revision().publish()
+
+    resp = client.get("/")
+    assert resp.status_code == 200
diff --git a/apps/core/views.py b/apps/core/views.py
new file mode 100644
index 0000000..bbfeb4f
--- /dev/null
+++ b/apps/core/views.py
@@ -0,0 +1,40 @@
+from __future__ import annotations
+
+from django.http import HttpRequest, HttpResponse, HttpResponseNotAllowed
+from django.shortcuts import redirect, render
+from django.utils.http import url_has_allowed_host_and_scheme
+
+from apps.core.consent import ConsentService
+
+
+def consent_view(request: HttpRequest) -> HttpResponse:
+    if request.method != "POST":
+        return HttpResponseNotAllowed(["POST"])
+
+    analytics = False
+    advertising = False
+
+    if request.POST.get("accept_all"):
+        analytics = True
+        advertising = True
+    elif request.POST.get("reject_all"):
+        analytics = False
+        advertising = False
+    else:
+        analytics = request.POST.get("analytics") in {"true", "1", "on"}
+        advertising = request.POST.get("advertising") in {"true", "1", "on"}
+
+    target = request.META.get("HTTP_REFERER", "/")
+    if not url_has_allowed_host_and_scheme(
+        url=target,
+        allowed_hosts={request.get_host()},
+        require_https=request.is_secure(),
+    ):
+        target = "/"
+    response = redirect(target)
+    ConsentService.set_consent(response, analytics=analytics, advertising=advertising)
+    return response
+
+
+def robots_txt(request: HttpRequest) -> HttpResponse:
+    return render(request, "core/robots.txt", content_type="text/plain")
diff --git a/apps/legal/__init__.py b/apps/legal/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/legal/apps.py b/apps/legal/apps.py
new file mode 100644
index 0000000..8fea38e
--- /dev/null
+++ b/apps/legal/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class LegalConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.legal"
diff --git a/apps/legal/migrations/0001_initial.py b/apps/legal/migrations/0001_initial.py
new file mode 100644
index 0000000..e72e2e1
--- /dev/null
+++ b/apps/legal/migrations/0001_initial.py
@@ -0,0 +1,40 @@
+# Generated by Django 5.2.11 on 2026-02-28 11:42
+
+import django.db.models.deletion
+import wagtail.fields
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('wagtailcore', '0094_alter_page_locale'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='LegalIndexPage',
+            fields=[
+                ('page_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='wagtailcore.page')),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=('wagtailcore.page',),
+        ),
+        migrations.CreateModel(
+            name='LegalPage',
+            fields=[
+                ('page_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='wagtailcore.page')),
+                ('body', wagtail.fields.RichTextField()),
+                ('last_updated', models.DateField()),
+                ('show_in_footer', models.BooleanField(default=True)),
+            ],
+            options={
+                'abstract': False,
+            },
+            bases=('wagtailcore.page',),
+        ),
+    ]
diff --git a/apps/legal/migrations/__init__.py b/apps/legal/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/legal/models.py b/apps/legal/models.py
new file mode 100644
index 0000000..74abc93
--- /dev/null
+++ b/apps/legal/models.py
@@ -0,0 +1,25 @@
+from django.db import models
+from wagtail.fields import RichTextField
+from wagtail.models import Page
+
+
+class LegalIndexPage(Page):
+    parent_page_types = ["blog.HomePage"]
+    subpage_types = ["legal.LegalPage"]
+
+    def serve(self, request):
+        from django.shortcuts import redirect
+
+        return redirect("/")
+
+    def get_sitemap_urls(self, request=None):
+        return []
+
+
+class LegalPage(Page):
+    body = RichTextField()
+    last_updated = models.DateField()
+    show_in_footer = models.BooleanField(default=True)
+
+    parent_page_types = ["legal.LegalIndexPage"]
+    subpage_types = []
diff --git a/apps/legal/tests/__init__.py b/apps/legal/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/legal/tests/test_models.py b/apps/legal/tests/test_models.py
new file mode 100644
index 0000000..ec82f02
--- /dev/null
+++ b/apps/legal/tests/test_models.py
@@ -0,0 +1,23 @@
+import pytest
+
+from apps.legal.models import LegalIndexPage, LegalPage
+
+
+@pytest.mark.django_db
+def test_legal_index_redirects(client, home_page):
+    legal_index = LegalIndexPage(title="Legal", slug="legal")
+    home_page.add_child(instance=legal_index)
+    legal_index.save_revision().publish()
+    resp = client.get("/legal/")
+    assert resp.status_code == 302
+
+
+@pytest.mark.django_db
+def test_legal_page_render(client, home_page):
+    legal_index = LegalIndexPage(title="Legal", slug="legal")
+    home_page.add_child(instance=legal_index)
+    legal = LegalPage(title="Privacy", slug="privacy-policy", last_updated="2026-01-01", body="<p>x</p>")
+    legal_index.add_child(instance=legal)
+    legal.save_revision().publish()
+    resp = client.get("/legal/privacy-policy/")
+    assert resp.status_code == 200
diff --git a/apps/legal/tests/test_more.py b/apps/legal/tests/test_more.py
new file mode 100644
index 0000000..44e68ba
--- /dev/null
+++ b/apps/legal/tests/test_more.py
@@ -0,0 +1,8 @@
+import pytest
+
+from apps.legal.models import LegalIndexPage
+
+
+@pytest.mark.django_db
+def test_legal_index_sitemap_urls_empty():
+    assert LegalIndexPage().get_sitemap_urls() == []
diff --git a/apps/newsletter/__init__.py b/apps/newsletter/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/newsletter/apps.py b/apps/newsletter/apps.py
new file mode 100644
index 0000000..81151b7
--- /dev/null
+++ b/apps/newsletter/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class NewsletterConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "apps.newsletter"
diff --git a/apps/newsletter/forms.py b/apps/newsletter/forms.py
new file mode 100644
index 0000000..4cdc56a
--- /dev/null
+++ b/apps/newsletter/forms.py
@@ -0,0 +1,7 @@
+from django import forms
+
+
+class SubscriptionForm(forms.Form):
+    email = forms.EmailField()
+    source = forms.CharField(required=False)
+    honeypot = forms.CharField(required=False)
diff --git a/apps/newsletter/migrations/0001_initial.py b/apps/newsletter/migrations/0001_initial.py
new file mode 100644
index 0000000..de2e42e
--- /dev/null
+++ b/apps/newsletter/migrations/0001_initial.py
@@ -0,0 +1,24 @@
+# Generated by Django 5.2.11 on 2026-02-28 11:42
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='NewsletterSubscription',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('email', models.EmailField(max_length=254, unique=True)),
+                ('confirmed', models.BooleanField(default=False)),
+                ('source', models.CharField(default='unknown', max_length=100)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+            ],
+        ),
+    ]
diff --git a/apps/newsletter/migrations/__init__.py b/apps/newsletter/migrations/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/newsletter/models.py b/apps/newsletter/models.py
new file mode 100644
index 0000000..7d39217
--- /dev/null
+++ b/apps/newsletter/models.py
@@ -0,0 +1,11 @@
+from django.db import models
+
+
+class NewsletterSubscription(models.Model):
+    email = models.EmailField(unique=True)
+    confirmed = models.BooleanField(default=False)
+    source = models.CharField(max_length=100, default="unknown")
+    created_at = models.DateTimeField(auto_now_add=True)
+
+    def __str__(self) -> str:
+        return self.email
diff --git a/apps/newsletter/services.py b/apps/newsletter/services.py
new file mode 100644
index 0000000..3930c56
--- /dev/null
+++ b/apps/newsletter/services.py
@@ -0,0 +1,43 @@
+from __future__ import annotations
+
+import logging
+import os
+
+import requests
+
+logger = logging.getLogger(__name__)
+
+
+class ProviderSyncError(Exception):
+    pass
+
+
+class ProviderSyncService:
+    def sync(self, subscription):
+        raise NotImplementedError
+
+
+class ButtondownSyncService(ProviderSyncService):
+    endpoint = "https://api.buttondown.email/v1/subscribers"
+
+    def sync(self, subscription):
+        api_key = os.getenv("BUTTONDOWN_API_KEY", "")
+        if not api_key:
+            raise ProviderSyncError("BUTTONDOWN_API_KEY is not configured")
+
+        response = requests.post(
+            self.endpoint,
+            headers={"Authorization": f"Token {api_key}", "Content-Type": "application/json"},
+            json={"email": subscription.email},
+            timeout=10,
+        )
+        if response.status_code >= 400:
+            raise ProviderSyncError(f"Buttondown sync failed: {response.status_code}")
+        logger.info("Synced subscription %s to Buttondown", subscription.email)
+
+
+def get_provider_service() -> ProviderSyncService:
+    provider = os.getenv("NEWSLETTER_PROVIDER", "buttondown").lower().strip()
+    if provider != "buttondown":
+        raise ProviderSyncError(f"Unsupported newsletter provider: {provider}")
+    return ButtondownSyncService()
diff --git a/apps/newsletter/tests/__init__.py b/apps/newsletter/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/apps/newsletter/tests/test_more.py b/apps/newsletter/tests/test_more.py
new file mode 100644
index 0000000..3ec368e
--- /dev/null
+++ b/apps/newsletter/tests/test_more.py
@@ -0,0 +1,14 @@
+import pytest
+
+from apps.newsletter.services import ProviderSyncService
+from apps.newsletter.views import confirmation_token
+
+
+def test_confirmation_token_roundtrip():
+    token = confirmation_token("x@example.com")
+    assert token
+
+
+def test_provider_sync_not_implemented():
+    with pytest.raises(NotImplementedError):
+        ProviderSyncService().sync(None)
diff --git a/apps/newsletter/tests/test_views.py b/apps/newsletter/tests/test_views.py
new file mode 100644
index 0000000..bc48202
--- /dev/null
+++ b/apps/newsletter/tests/test_views.py
@@ -0,0 +1,55 @@
+import pytest
+from django.core import signing
+
+from apps.newsletter.models import NewsletterSubscription
+
+
+@pytest.mark.django_db
+def test_subscribe_ok(client):
+    resp = client.post("/newsletter/subscribe/", {"email": "a@example.com", "source": "nav"})
+    assert resp.status_code == 200
+    assert resp.json()["status"] == "ok"
+    assert NewsletterSubscription.objects.filter(email="a@example.com").exists()
+
+
+@pytest.mark.django_db
+def test_subscribe_sends_confirmation_email(client, mailoutbox):
+    resp = client.post("/newsletter/subscribe/", {"email": "new@example.com", "source": "nav"})
+    assert resp.status_code == 200
+    assert len(mailoutbox) == 1
+    assert "Confirm your No Hype AI newsletter subscription" in mailoutbox[0].subject
+
+
+@pytest.mark.django_db
+def test_duplicate_subscribe_returns_ok_without_extra_email(client, mailoutbox):
+    client.post("/newsletter/subscribe/", {"email": "dupe@example.com", "source": "nav"})
+    assert len(mailoutbox) == 1
+    resp = client.post("/newsletter/subscribe/", {"email": "dupe@example.com", "source": "footer"})
+    assert resp.status_code == 200
+    assert resp.json()["status"] == "ok"
+    assert len(mailoutbox) == 1
+
+
+@pytest.mark.django_db
+def test_subscribe_invalid(client):
+    resp = client.post("/newsletter/subscribe/", {"email": "bad"})
+    assert resp.status_code == 400
+
+
+@pytest.mark.django_db
+def test_confirm_endpoint(client):
+    sub = NewsletterSubscription.objects.create(email="b@example.com")
+    token = signing.dumps(sub.email, salt="newsletter-confirm")
+    resp = client.get(f"/newsletter/confirm/{token}/")
+    assert resp.status_code == 302
+    sub.refresh_from_db()
+    assert sub.confirmed is True
+
+
+@pytest.mark.django_db
+def test_confirm_endpoint_with_expired_token(client, monkeypatch):
+    sub = NewsletterSubscription.objects.create(email="c@example.com")
+    token = signing.dumps(sub.email, salt="newsletter-confirm")
+    monkeypatch.setattr("apps.newsletter.views.CONFIRMATION_TOKEN_MAX_AGE_SECONDS", -1)
+    resp = client.get(f"/newsletter/confirm/{token}/")
+    assert resp.status_code == 404
diff --git a/apps/newsletter/urls.py b/apps/newsletter/urls.py
new file mode 100644
index 0000000..a0e8e3f
--- /dev/null
+++ b/apps/newsletter/urls.py
@@ -0,0 +1,8 @@
+from django.urls import path
+
+from apps.newsletter.views import ConfirmView, SubscribeView
+
+urlpatterns = [
+    path("subscribe/", SubscribeView.as_view(), name="newsletter_subscribe"),
+    path("confirm/<str:token>/", ConfirmView.as_view(), name="newsletter_confirm"),
+]
diff --git a/apps/newsletter/views.py b/apps/newsletter/views.py
new file mode 100644
index 0000000..54a60f0
--- /dev/null
+++ b/apps/newsletter/views.py
@@ -0,0 +1,78 @@
+from __future__ import annotations
+
+import logging
+
+from django.core import signing
+from django.core.mail import EmailMultiAlternatives
+from django.http import Http404, JsonResponse
+from django.shortcuts import get_object_or_404, redirect
+from django.template.loader import render_to_string
+from django.urls import reverse
+from django.views import View
+
+from apps.newsletter.forms import SubscriptionForm
+from apps.newsletter.models import NewsletterSubscription
+from apps.newsletter.services import ProviderSyncError, get_provider_service
+
+CONFIRMATION_TOKEN_MAX_AGE_SECONDS = 60 * 60 * 24 * 2
+logger = logging.getLogger(__name__)
+
+
+def confirmation_token(email: str) -> str:
+    return signing.dumps(email, salt="newsletter-confirm")
+
+
+def send_confirmation_email(request, subscription: NewsletterSubscription) -> None:
+    token = confirmation_token(subscription.email)
+    confirm_url = request.build_absolute_uri(reverse("newsletter_confirm", args=[token]))
+    context = {"confirmation_url": confirm_url, "subscription": subscription}
+    subject = render_to_string("newsletter/email/confirmation_subject.txt", context).strip()
+    text_body = render_to_string("newsletter/email/confirmation_body.txt", context)
+    html_body = render_to_string("newsletter/email/confirmation_body.html", context)
+    message = EmailMultiAlternatives(
+        subject=subject,
+        body=text_body,
+        to=[subscription.email],
+    )
+    message.attach_alternative(html_body, "text/html")
+    message.send()
+
+
+class SubscribeView(View):
+    def post(self, request):
+        form = SubscriptionForm(request.POST)
+        if not form.is_valid():
+            return JsonResponse({"status": "error", "field": "email"}, status=400)
+        if form.cleaned_data.get("honeypot"):
+            return JsonResponse({"status": "ok"})
+
+        email = form.cleaned_data["email"].lower().strip()
+        source = form.cleaned_data.get("source") or "unknown"
+        subscription, created = NewsletterSubscription.objects.get_or_create(
+            email=email,
+            defaults={"source": source},
+        )
+        if created and not subscription.confirmed:
+            send_confirmation_email(request, subscription)
+        return JsonResponse({"status": "ok"})
+
+
+class ConfirmView(View):
+    def get(self, request, token: str):
+        try:
+            email = signing.loads(
+                token,
+                salt="newsletter-confirm",
+                max_age=CONFIRMATION_TOKEN_MAX_AGE_SECONDS,
+            )
+        except signing.BadSignature as exc:
+            raise Http404 from exc
+        subscription = get_object_or_404(NewsletterSubscription, email=email)
+        subscription.confirmed = True
+        subscription.save(update_fields=["confirmed"])
+        service = get_provider_service()
+        try:
+            service.sync(subscription)
+        except ProviderSyncError as exc:
+            logger.exception("Newsletter provider sync failed: %s", exc)
+        return redirect("/")
diff --git a/config/__init__.py b/config/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/config/asgi.py b/config/asgi.py
new file mode 100644
index 0000000..bc33ab2
--- /dev/null
+++ b/config/asgi.py
@@ -0,0 +1,7 @@
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault("DJANGO_SETTINGS_MODULE", "config.settings.development")
+
+application = get_asgi_application()
diff --git a/config/settings/__init__.py b/config/settings/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/config/settings/base.py b/config/settings/base.py
new file mode 100644
index 0000000..89c2c16
--- /dev/null
+++ b/config/settings/base.py
@@ -0,0 +1,147 @@
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+import dj_database_url
+from django.core.exceptions import ImproperlyConfigured
+from dotenv import load_dotenv
+
+load_dotenv()
+
+BASE_DIR = Path(__file__).resolve().parents[2]
+
+SECRET_KEY = os.getenv("SECRET_KEY")
+if not SECRET_KEY:
+    raise ImproperlyConfigured("SECRET_KEY environment variable is required.")
+
+DATABASE_URL = os.getenv("DATABASE_URL")
+if not DATABASE_URL:
+    raise ImproperlyConfigured("DATABASE_URL environment variable is required.")
+DEBUG = os.getenv("DEBUG", "0") == "1"
+ALLOWED_HOSTS = [h.strip() for h in os.getenv("ALLOWED_HOSTS", "localhost,127.0.0.1").split(",") if h.strip()]
+
+INSTALLED_APPS = [
+    "django.contrib.admin",
+    "django.contrib.auth",
+    "django.contrib.contenttypes",
+    "django.contrib.sessions",
+    "django.contrib.messages",
+    "django.contrib.staticfiles",
+    "django.contrib.sitemaps",
+    "taggit",
+    "modelcluster",
+    "wagtail.contrib.forms",
+    "wagtail.contrib.redirects",
+    "wagtail.contrib.sitemaps",
+    "wagtail.contrib.settings",
+    "wagtail.embeds",
+    "wagtail.sites",
+    "wagtail.users",
+    "wagtail.snippets",
+    "wagtail.documents",
+    "wagtail.images",
+    "wagtail.search",
+    "wagtail.admin",
+    "wagtail",
+    "wagtailseo",
+    "tailwind",
+    "theme",
+    "apps.core",
+    "apps.blog",
+    "apps.authors",
+    "apps.comments",
+    "apps.newsletter",
+    "apps.legal",
+]
+
+MIDDLEWARE = [
+    "django.middleware.security.SecurityMiddleware",
+    "apps.core.middleware.SecurityHeadersMiddleware",
+    "whitenoise.middleware.WhiteNoiseMiddleware",
+    "django.contrib.sessions.middleware.SessionMiddleware",
+    "django.middleware.common.CommonMiddleware",
+    "django.middleware.csrf.CsrfViewMiddleware",
+    "django.contrib.auth.middleware.AuthenticationMiddleware",
+    "django.contrib.messages.middleware.MessageMiddleware",
+    "django.middleware.clickjacking.XFrameOptionsMiddleware",
+    "wagtail.contrib.redirects.middleware.RedirectMiddleware",
+    "apps.core.middleware.ConsentMiddleware",
+]
+
+ROOT_URLCONF = "config.urls"
+
+TEMPLATES = [
+    {
+        "BACKEND": "django.template.backends.django.DjangoTemplates",
+        "DIRS": [BASE_DIR / "templates"],
+        "APP_DIRS": True,
+        "OPTIONS": {
+            "context_processors": [
+                "django.template.context_processors.request",
+                "django.contrib.auth.context_processors.auth",
+                "django.contrib.messages.context_processors.messages",
+                "apps.core.context_processors.site_settings",
+            ],
+        },
+    },
+]
+
+WSGI_APPLICATION = "config.wsgi.application"
+
+DATABASES = {"default": dj_database_url.parse(DATABASE_URL)}
+
+AUTH_PASSWORD_VALIDATORS = [
+    {"NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator"},
+    {"NAME": "django.contrib.auth.password_validation.MinimumLengthValidator"},
+    {"NAME": "django.contrib.auth.password_validation.CommonPasswordValidator"},
+    {"NAME": "django.contrib.auth.password_validation.NumericPasswordValidator"},
+]
+
+LANGUAGE_CODE = "en-us"
+TIME_ZONE = "UTC"
+USE_I18N = True
+USE_TZ = True
+
+STATIC_URL = "/static/"
+STATIC_ROOT = BASE_DIR / "staticfiles"
+STATICFILES_DIRS = [BASE_DIR / "static"]
+MEDIA_URL = "/media/"
+MEDIA_ROOT = BASE_DIR / "media"
+
+DEFAULT_AUTO_FIELD = "django.db.models.BigAutoField"
+
+WAGTAIL_SITE_NAME = os.getenv("WAGTAIL_SITE_NAME", "No Hype AI")
+WAGTAILADMIN_BASE_URL = os.getenv("WAGTAILADMIN_BASE_URL", "http://localhost:8035")
+
+LOGIN_URL = "wagtailadmin_login"
+
+CONSENT_POLICY_VERSION = int(os.getenv("CONSENT_POLICY_VERSION", "1"))
+
+EMAIL_BACKEND = os.getenv("EMAIL_BACKEND", "django.core.mail.backends.console.EmailBackend")
+EMAIL_HOST = os.getenv("EMAIL_HOST", "")
+EMAIL_PORT = int(os.getenv("EMAIL_PORT", "587"))
+EMAIL_USE_TLS = os.getenv("EMAIL_USE_TLS", "1") == "1"
+EMAIL_HOST_USER = os.getenv("EMAIL_HOST_USER", "")
+EMAIL_HOST_PASSWORD = os.getenv("EMAIL_HOST_PASSWORD", "")
+DEFAULT_FROM_EMAIL = os.getenv("DEFAULT_FROM_EMAIL", "hello@nohypeai.com")
+
+NEWSLETTER_PROVIDER = os.getenv("NEWSLETTER_PROVIDER", "buttondown")
+
+CACHES = {
+    "default": {
+        "BACKEND": "django.core.cache.backends.locmem.LocMemCache",
+    }
+}
+
+X_FRAME_OPTIONS = "SAMEORIGIN"
+SECURE_REFERRER_POLICY = "strict-origin-when-cross-origin"
+SECURE_CONTENT_TYPE_NOSNIFF = True
+X_CONTENT_TYPE_OPTIONS = "nosniff"
+
+CSRF_TRUSTED_ORIGINS = [u for u in os.getenv("CSRF_TRUSTED_ORIGINS", "http://localhost:8035").split(",") if u]
+TRUSTED_PROXY_IPS = [ip.strip() for ip in os.getenv("TRUSTED_PROXY_IPS", "").split(",") if ip.strip()]
+
+STATICFILES_STORAGE = "whitenoise.storage.CompressedManifestStaticFilesStorage"
+
+TAILWIND_APP_NAME = "theme"
diff --git a/config/settings/development.py b/config/settings/development.py
new file mode 100644
index 0000000..224df25
--- /dev/null
+++ b/config/settings/development.py
@@ -0,0 +1,13 @@
+from .base import *  # noqa
+
+DEBUG = True
+
+INTERNAL_IPS = ["127.0.0.1"]
+
+try:
+    import debug_toolbar  # noqa: F401
+
+    INSTALLED_APPS += ["debug_toolbar"]
+    MIDDLEWARE = ["debug_toolbar.middleware.DebugToolbarMiddleware", *MIDDLEWARE]
+except Exception:
+    pass
diff --git a/config/settings/production.py b/config/settings/production.py
new file mode 100644
index 0000000..abd04c6
--- /dev/null
+++ b/config/settings/production.py
@@ -0,0 +1,9 @@
+from .base import *  # noqa
+
+DEBUG = False
+
+SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
+USE_X_FORWARDED_HOST = True
+SECURE_SSL_REDIRECT = True
+SESSION_COOKIE_SECURE = True
+CSRF_COOKIE_SECURE = True
diff --git a/config/urls.py b/config/urls.py
new file mode 100644
index 0000000..2e22f1f
--- /dev/null
+++ b/config/urls.py
@@ -0,0 +1,23 @@
+from django.contrib import admin
+from django.urls import include, path
+from django.views.generic import RedirectView
+from wagtail import urls as wagtail_urls
+from wagtail.contrib.sitemaps.views import sitemap
+
+from apps.blog.feeds import AllArticlesFeed, TagArticlesFeed
+from apps.core.views import consent_view, robots_txt
+
+urlpatterns = [
+    path("django-admin/", admin.site.urls),
+    path("cms/", include("wagtail.admin.urls")),
+    path("documents/", include("wagtail.documents.urls")),
+    path("comments/", include("apps.comments.urls")),
+    path("newsletter/", include("apps.newsletter.urls")),
+    path("consent/", consent_view, name="consent"),
+    path("robots.txt", robots_txt, name="robots_txt"),
+    path("feed/", AllArticlesFeed(), name="rss_feed"),
+    path("feed/tag/<slug:tag_slug>/", TagArticlesFeed(), name="rss_feed_by_tag"),
+    path("sitemap.xml", sitemap),
+    path("admin/", RedirectView.as_view(url="/cms/", permanent=False)),
+    path("", include(wagtail_urls)),
+]
diff --git a/config/wsgi.py b/config/wsgi.py
new file mode 100644
index 0000000..ee192cf
--- /dev/null
+++ b/config/wsgi.py
@@ -0,0 +1,7 @@
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault("DJANGO_SETTINGS_MODULE", "config.settings.production")
+
+application = get_wsgi_application()
diff --git a/conftest.py b/conftest.py
new file mode 100644
index 0000000..0d2df7c
--- /dev/null
+++ b/conftest.py
@@ -0,0 +1,52 @@
+import pytest
+from wagtail.models import Page, Site
+
+from apps.blog.models import ArticleIndexPage, ArticlePage, HomePage
+from apps.blog.tests.factories import AuthorFactory
+
+
+@pytest.fixture
+def home_page(db):
+    root = Page.get_first_root_node()
+    home = HomePage(title="Home", slug=f"home-{HomePage.objects.count() + 1}")
+    root.add_child(instance=home)
+    home.save_revision().publish()
+    site = Site.objects.filter(is_default_site=True).first()
+    if site:
+        site.root_page = home
+        site.hostname = "localhost"
+        site.port = 80
+        site.site_name = "No Hype AI"
+        site.save()
+    else:
+        Site.objects.create(
+            hostname="localhost",
+            root_page=home,
+            is_default_site=True,
+            site_name="No Hype AI",
+            port=80,
+        )
+    return home
+
+
+@pytest.fixture
+def article_index(home_page):
+    index = ArticleIndexPage(title="Articles", slug=f"articles-{ArticleIndexPage.objects.count() + 1}")
+    home_page.add_child(instance=index)
+    index.save_revision().publish()
+    return index
+
+
+@pytest.fixture
+def article_page(article_index):
+    author = AuthorFactory()
+    article = ArticlePage(
+        title=f"Article {ArticlePage.objects.count() + 1}",
+        slug=f"article-{ArticlePage.objects.count() + 1}",
+        author=author,
+        summary="summary",
+        body=[("rich_text", "<p>body words</p>")],
+    )
+    article_index.add_child(instance=article)
+    article.save_revision().publish()
+    return article
diff --git a/docker-compose.ci.yml b/docker-compose.ci.yml
new file mode 100644
index 0000000..c89e948
--- /dev/null
+++ b/docker-compose.ci.yml
@@ -0,0 +1,7 @@
+services:
+  web:
+    volumes: []
+    ports: []
+
+  db:
+    ports: []
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..cd89585
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,42 @@
+services:
+  web:
+    build: .
+    working_dir: /app
+    command: python manage.py runserver 0.0.0.0:8000
+    volumes:
+      - .:/app
+    ports:
+      - "8035:8000"
+    environment:
+      SECRET_KEY: dev-secret-key
+      DEBUG: "1"
+      ALLOWED_HOSTS: localhost,127.0.0.1,web
+      WAGTAIL_SITE_NAME: No Hype AI
+      DATABASE_URL: postgres://nohype:nohype@db:5432/nohype
+      DJANGO_SETTINGS_MODULE: config.settings.development
+      WAGTAILADMIN_BASE_URL: http://localhost:8035
+      CONSENT_POLICY_VERSION: "1"
+      EMAIL_BACKEND: django.core.mail.backends.console.EmailBackend
+      DEFAULT_FROM_EMAIL: hello@nohypeai.com
+      NEWSLETTER_PROVIDER: buttondown
+    depends_on:
+      db:
+        condition: service_healthy
+
+  db:
+    image: postgres:16-alpine
+    environment:
+      POSTGRES_DB: nohype
+      POSTGRES_USER: nohype
+      POSTGRES_PASSWORD: nohype
+    volumes:
+      - nohype_pg:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U nohype -d nohype"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+      start_period: 5s
+
+volumes:
+  nohype_pg:
diff --git a/implementation.md b/implementation.md
index bd409e3..bb223f6 100644
--- a/implementation.md
+++ b/implementation.md
@@ -179,8 +179,8 @@ Every milestone follows the **Red → Green → Refactor** cycle. No production
 ### 3.3 Coverage Requirements
 
 - **Minimum 90% line coverage** on all `apps/` code, enforced via `pytest-cov` in CI
-- Coverage reports generated on every push; PRs blocked below threshold
-- E2E tests run nightly, not on every push (they are slow)
+- Coverage reports generated on every pull request; PRs blocked below threshold
+- E2E tests run nightly, not on every pull request (they are slow)
 
 ### 3.4 Test Organisation
 
@@ -212,10 +212,10 @@ class ArticlePageFactory(wagtail_factories.PageFactory):
     # Note: no is_featured — featured article is set on HomePage.featured_article only
 ```
 
-### 3.6 CI Pipeline (GitHub Actions)
+### 3.6 CI Pipeline (Gitea Actions)
 
 ```
-on: [push, pull_request]
+on: [pull_request]
 
 jobs:
   test:
@@ -232,6 +232,8 @@ jobs:
       - Run Playwright suite
 ```
 
+Rationale: all merges should flow through pull requests. Running the same checks on both `push` and `pull_request` duplicates work and wastes compute.
+
 ---
 
 ## Milestone 0 — Project Scaffold & Tooling
@@ -242,7 +244,7 @@ jobs:
 - `./manage.py runserver` starts without errors
 - `pytest` runs and exits 0 (no tests yet = trivially passing)
 - `ruff` and `mypy` pass on an empty codebase
-- GitHub Actions workflow file committed and green
+- Gitea Actions workflow file committed and green
 
 ### M0 — Tasks
 
@@ -271,7 +273,7 @@ jobs:
 - Add Prism.js and Alpine.js to `static/js/`; wire into `base.html`
 
 #### M0.5 — CI
-- Create `.github/workflows/ci.yml`
+- Create `.gitea/workflows/ci.yml`
 - Install `pytest-django`, `pytest-cov`, `ruff`, `mypy`, `factory_boy`, `wagtail-factories`
 - Create `pytest.ini` / `pyproject.toml` config pointing at `config.settings.development`
 - Write the only M0 test: a trivial smoke test that asserts `1 == 1` to confirm CI runs
@@ -1487,4 +1489,4 @@ A milestone is **Done** when all of the following are true:
 
 ---
 
-*This document is the source of truth for implementation order and test requirements. Revise it when requirements change — do not let it drift from the codebase.*
\ No newline at end of file
+*This document is the source of truth for implementation order and test requirements. Revise it when requirements change — do not let it drift from the codebase.*
diff --git a/manage.py b/manage.py
new file mode 100755
index 0000000..f7ba6cb
--- /dev/null
+++ b/manage.py
@@ -0,0 +1,14 @@
+#!/usr/bin/env python
+import os
+import sys
+
+
+def main() -> None:
+    os.environ.setdefault("DJANGO_SETTINGS_MODULE", "config.settings.development")
+    from django.core.management import execute_from_command_line
+
+    execute_from_command_line(sys.argv)
+
+
+if __name__ == "__main__":
+    main()
diff --git a/pyproject.toml b/pyproject.toml
new file mode 100644
index 0000000..5270ff4
--- /dev/null
+++ b/pyproject.toml
@@ -0,0 +1,45 @@
+[tool.ruff]
+line-length = 120
+target-version = "py312"
+exclude = ["migrations"]
+
+[tool.ruff.lint]
+select = ["E", "F", "I", "UP"]
+
+[tool.ruff.lint.per-file-ignores]
+"config/settings/development.py" = ["F403", "F405"]
+
+[tool.mypy]
+python_version = "3.12"
+plugins = ["mypy_django_plugin.main"]
+warn_unused_configs = true
+warn_redundant_casts = true
+warn_unused_ignores = true
+check_untyped_defs = true
+exclude = ["migrations"]
+disable_error_code = ["var-annotated", "override", "import-untyped", "arg-type"]
+allow_untyped_globals = true
+
+[[tool.mypy.overrides]]
+module = ["wagtail.*", "taggit.*", "modelcluster.*", "wagtailseo.*", "debug_toolbar"]
+ignore_missing_imports = true
+
+[[tool.mypy.overrides]]
+module = ["apps.authors.models"]
+ignore_errors = true
+
+[tool.django-stubs]
+django_settings_module = "config.settings.development"
+
+[tool.coverage.run]
+source = ["apps"]
+omit = [
+  "*/migrations/*",
+  "*/tests/*",
+]
+
+[tool.coverage.report]
+omit = [
+  "*/migrations/*",
+  "*/tests/*",
+]
diff --git a/pytest.ini b/pytest.ini
new file mode 100644
index 0000000..3ed55ca
--- /dev/null
+++ b/pytest.ini
@@ -0,0 +1,6 @@
+[pytest]
+DJANGO_SETTINGS_MODULE = config.settings.development
+python_files = test_*.py
+addopts = -q --cov=apps --cov-report=term-missing --cov-fail-under=90
+markers =
+    e2e: browser-based end-to-end test suite for nightly jobs
diff --git a/requirements/base.txt b/requirements/base.txt
new file mode 100644
index 0000000..af13702
--- /dev/null
+++ b/requirements/base.txt
@@ -0,0 +1,24 @@
+Django~=5.2.0
+wagtail~=7.0.0
+wagtail-seo~=3.1.1
+psycopg2-binary~=2.9.0
+Pillow~=11.0.0
+django-taggit~=6.0.0
+whitenoise~=6.0.0
+gunicorn~=23.0.0
+python-dotenv~=1.0.0
+dj-database-url~=2.2.0
+django-tailwind~=3.8.0
+django-csp~=3.8.0
+pytest~=8.3.0
+pytest-django~=4.9.0
+pytest-cov~=5.0.0
+pytest-benchmark~=4.0.0
+factory-boy~=3.3.0
+wagtail-factories~=4.2.0
+feedparser~=6.0.0
+playwright~=1.52.0
+pytest-playwright~=0.7.0
+ruff~=0.6.0
+mypy~=1.11.0
+django-stubs~=5.1.0
diff --git a/requirements/production.txt b/requirements/production.txt
new file mode 100644
index 0000000..c5217f5
--- /dev/null
+++ b/requirements/production.txt
@@ -0,0 +1,2 @@
+-r base.txt
+sentry-sdk~=2.0.0
diff --git a/static/js/consent.js b/static/js/consent.js
new file mode 100644
index 0000000..1a53c05
--- /dev/null
+++ b/static/js/consent.js
@@ -0,0 +1,13 @@
+(function () {
+  function parseCookieValue(name) {
+    const match = document.cookie.match(new RegExp('(?:^|;)\\s*' + name + '\\s*=\\s*([^;]+)'));
+    if (!match) return {};
+    try {
+      return Object.fromEntries(new URLSearchParams(match[1]));
+    } catch (_e) {
+      return {};
+    }
+  }
+  const c = parseCookieValue('nhAiConsent');
+  window.__nhConsent = { analytics: c.a === '1', advertising: c.d === '1' };
+})();
diff --git a/static/js/newsletter.js b/static/js/newsletter.js
new file mode 100644
index 0000000..6562ae2
--- /dev/null
+++ b/static/js/newsletter.js
@@ -0,0 +1,54 @@
+(() => {
+  const setMessage = (form, text) => {
+    const target = form.querySelector("[data-newsletter-message]");
+    if (target) {
+      target.textContent = text;
+    }
+  };
+
+  const bindNewsletterForms = () => {
+    const forms = document.querySelectorAll("form[data-newsletter-form]");
+    forms.forEach((form) => {
+      form.addEventListener("submit", async (event) => {
+        event.preventDefault();
+        const formData = new FormData(form);
+        try {
+          const response = await fetch(form.action, {
+            method: "POST",
+            body: formData,
+          });
+          if (!response.ok) {
+            setMessage(form, "Please enter a valid email.");
+            return;
+          }
+          setMessage(form, "Check your email to confirm your subscription.");
+          form.reset();
+        } catch (error) {
+          setMessage(form, "Subscription failed. Please try again.");
+        }
+      });
+    });
+  };
+
+  const bindCopyLink = () => {
+    const button = document.querySelector("[data-copy-link]");
+    if (!button) {
+      return;
+    }
+    button.addEventListener("click", async () => {
+      const url = button.getAttribute("data-copy-url");
+      if (!url) {
+        return;
+      }
+      try {
+        await navigator.clipboard.writeText(url);
+        button.textContent = "Copied";
+      } catch (error) {
+        button.textContent = "Copy failed";
+      }
+    });
+  };
+
+  bindNewsletterForms();
+  bindCopyLink();
+})();
diff --git a/static/js/prism.js b/static/js/prism.js
new file mode 100644
index 0000000..bcd212e
--- /dev/null
+++ b/static/js/prism.js
@@ -0,0 +1 @@
+/* placeholder for Prism.js bundle */
diff --git a/static/js/theme.js b/static/js/theme.js
new file mode 100644
index 0000000..5fb7062
--- /dev/null
+++ b/static/js/theme.js
@@ -0,0 +1,14 @@
+(function () {
+  window.toggleTheme = function toggleTheme() {
+    const root = document.documentElement;
+    root.classList.toggle('dark');
+    localStorage.setItem('theme', root.classList.contains('dark') ? 'dark' : 'light');
+  };
+
+  document.addEventListener('DOMContentLoaded', function onReady() {
+    const toggle = document.querySelector('[data-theme-toggle]');
+    if (toggle) {
+      toggle.addEventListener('click', window.toggleTheme);
+    }
+  });
+})();
diff --git a/templates/base.html b/templates/base.html
new file mode 100644
index 0000000..b802c1d
--- /dev/null
+++ b/templates/base.html
@@ -0,0 +1,31 @@
+{% load static core_tags %}
+<!DOCTYPE html>
+<html lang="en" class="dark">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>{% block title %}No Hype AI{% endblock %}</title>
+    {% block head_meta %}{% endblock %}
+    <link rel="stylesheet" href="{% static 'css/styles.css' %}" />
+    <script nonce="{{ request.csp_nonce|default:'' }}">
+      (function(){try{if(localStorage.getItem('theme')==='light'){document.documentElement.classList.remove('dark');}}catch(e){}})();
+    </script>
+    <script src="{% static 'js/consent.js' %}" nonce="{{ request.csp_nonce|default:'' }}"></script>
+    <script src="{% static 'js/theme.js' %}" defer></script>
+    <script src="{% static 'js/prism.js' %}" defer></script>
+    <script src="{% static 'js/newsletter.js' %}" defer></script>
+  </head>
+  <body>
+    {% include 'components/nav.html' %}
+    {% include 'components/cookie_banner.html' %}
+    {% if messages %}
+      <section aria-label="Messages">
+        {% for message in messages %}
+          <p>{{ message }}</p>
+        {% endfor %}
+      </section>
+    {% endif %}
+    <main>{% block content %}{% endblock %}</main>
+    {% include 'components/footer.html' %}
+  </body>
+</html>
diff --git a/templates/blog/about_page.html b/templates/blog/about_page.html
new file mode 100644
index 0000000..268074a
--- /dev/null
+++ b/templates/blog/about_page.html
@@ -0,0 +1,14 @@
+{% extends 'base.html' %}
+{% load wagtailimages_tags wagtailcore_tags %}
+{% block content %}
+<h1>{{ page.title }}</h1>
+<p>{{ page.mission_statement }}</p>
+{{ page.body|richtext }}
+{% if page.featured_author %}
+  <h2>{{ page.featured_author.name }}</h2>
+  <p>{{ page.featured_author.bio }}</p>
+  {% if page.featured_author.avatar %}
+    {% image page.featured_author.avatar fill-200x200 %}
+  {% endif %}
+{% endif %}
+{% endblock %}
diff --git a/templates/blog/article_index_page.html b/templates/blog/article_index_page.html
new file mode 100644
index 0000000..edeafc4
--- /dev/null
+++ b/templates/blog/article_index_page.html
@@ -0,0 +1,35 @@
+{% extends 'base.html' %}
+{% load core_tags seo_tags %}
+{% block title %}Articles | No Hype AI{% endblock %}
+{% block head_meta %}
+  {% canonical_url page as canonical %}
+  <link rel="canonical" href="{{ canonical }}" />
+  <meta name="description" content="Latest No Hype AI articles and benchmark-driven reviews." />
+  <meta property="og:type" content="website" />
+  <meta property="og:title" content="Articles | No Hype AI" />
+  <meta property="og:url" content="{{ canonical }}" />
+{% endblock %}
+{% block content %}
+<h1>{{ page.title }}</h1>
+<section>
+  <h2>Filter by tag</h2>
+  <a href="/articles/" {% if not active_tag %}aria-current="page"{% endif %}>All</a>
+  {% for tag in available_tags %}
+    <a href="/articles/?tag={{ tag.slug }}" {% if active_tag == tag.slug %}aria-current="page"{% endif %}>{{ tag.name }}</a>
+  {% endfor %}
+</section>
+{% for article in articles %}
+  {% include 'components/article_card.html' with article=article %}
+{% empty %}
+  <p>No articles found.</p>
+{% endfor %}
+<nav aria-label="Pagination">
+  {% if articles.has_previous %}
+    <a href="?page={{ articles.previous_page_number }}{% if active_tag %}&tag={{ active_tag }}{% endif %}">Previous</a>
+  {% endif %}
+  <span>Page {{ articles.number }} of {{ paginator.num_pages }}</span>
+  {% if articles.has_next %}
+    <a href="?page={{ articles.next_page_number }}{% if active_tag %}&tag={{ active_tag }}{% endif %}">Next</a>
+  {% endif %}
+</nav>
+{% endblock %}
diff --git a/templates/blog/article_page.html b/templates/blog/article_page.html
new file mode 100644
index 0000000..76d47e3
--- /dev/null
+++ b/templates/blog/article_page.html
@@ -0,0 +1,91 @@
+{% extends 'base.html' %}
+{% load wagtailcore_tags wagtailimages_tags seo_tags %}
+{% block title %}{{ page.title }} | No Hype AI{% endblock %}
+{% block head_meta %}
+  {% canonical_url page as canonical %}
+  {% article_og_image_url page as og_image %}
+  <link rel="canonical" href="{{ canonical }}" />
+  <meta name="description" content="{{ page.search_description|default:page.summary }}" />
+  <meta property="og:type" content="article" />
+  <meta property="og:title" content="{{ page.title }} | No Hype AI" />
+  <meta property="og:description" content="{{ page.search_description|default:page.summary }}" />
+  <meta property="og:url" content="{{ canonical }}" />
+  {% if og_image %}<meta property="og:image" content="{{ og_image }}" />{% endif %}
+  <meta name="twitter:card" content="summary_large_image" />
+  <meta name="twitter:title" content="{{ page.title }} | No Hype AI" />
+  <meta name="twitter:description" content="{{ page.search_description|default:page.summary }}" />
+  {% if og_image %}<meta name="twitter:image" content="{{ og_image }}" />{% endif %}
+{% endblock %}
+{% block content %}
+<article>
+  <h1>{{ page.title }}</h1>
+  <p>{{ page.read_time_mins }} min read</p>
+  {% if page.hero_image %}
+    {% image page.hero_image fill-1200x630 %}
+  {% endif %}
+  {{ page.body }}
+  {% article_json_ld page %}
+</article>
+<section aria-label="Share this article">
+  <h2>Share</h2>
+  <a href="https://x.com/intent/post?url={{ request.build_absolute_uri|urlencode }}&text={{ page.title|urlencode }}" target="_blank" rel="noopener noreferrer">Share on X</a>
+  <a href="https://www.linkedin.com/sharing/share-offsite/?url={{ request.build_absolute_uri|urlencode }}" target="_blank" rel="noopener noreferrer">Share on LinkedIn</a>
+  <button type="button" data-copy-link data-copy-url="{{ request.build_absolute_uri }}">Copy link</button>
+</section>
+<section>
+  <h2>Related</h2>
+  {% for article in related_articles %}
+  <a href="{{ article.url }}">{{ article.title }}</a>
+  {% endfor %}
+</section>
+<aside>
+  <h2>Newsletter</h2>
+  {% include 'components/newsletter_form.html' with source='article' label='Never miss a post' %}
+</aside>
+{% if page.comments_enabled %}
+<section>
+  <h2>Comments</h2>
+  {% for comment in approved_comments %}
+    <article id="comment-{{ comment.id }}">
+      <p><strong>{{ comment.author_name }}</strong></p>
+      <p>{{ comment.body }}</p>
+      {% for reply in comment.replies.all %}
+        <article id="comment-{{ reply.id }}">
+          <p><strong>{{ reply.author_name }}</strong></p>
+          <p>{{ reply.body }}</p>
+        </article>
+      {% endfor %}
+      <form method="post" action="{% url 'comment_post' %}">
+        {% csrf_token %}
+        <input type="hidden" name="article_id" value="{{ page.id }}" />
+        <input type="hidden" name="parent_id" value="{{ comment.id }}" />
+        <input type="text" name="author_name" required />
+        <input type="email" name="author_email" required />
+        <textarea name="body" required></textarea>
+        <input type="text" name="honeypot" style="display:none" />
+        <button type="submit">Reply</button>
+      </form>
+    </article>
+  {% empty %}
+    <p>No comments yet.</p>
+  {% endfor %}
+  {% if comment_form and comment_form.errors %}
+    <div aria-label="Comment form errors">
+      {{ comment_form.non_field_errors }}
+      {% for field in comment_form %}
+        {{ field.errors }}
+      {% endfor %}
+    </div>
+  {% endif %}
+  <form method="post" action="{% url 'comment_post' %}">
+    {% csrf_token %}
+    <input type="hidden" name="article_id" value="{{ page.id }}" />
+    <input type="text" name="author_name" value="{% if comment_form %}{{ comment_form.author_name.value|default:'' }}{% endif %}" required />
+    <input type="email" name="author_email" value="{% if comment_form %}{{ comment_form.author_email.value|default:'' }}{% endif %}" required />
+    <textarea name="body" required>{% if comment_form %}{{ comment_form.body.value|default:'' }}{% endif %}</textarea>
+    <input type="text" name="honeypot" style="display:none" />
+    <button type="submit">Post comment</button>
+  </form>
+</section>
+{% endif %}
+{% endblock %}
diff --git a/templates/blog/blocks/callout_block.html b/templates/blog/blocks/callout_block.html
new file mode 100644
index 0000000..acc772f
--- /dev/null
+++ b/templates/blog/blocks/callout_block.html
@@ -0,0 +1,4 @@
+<div class="callout icon-{{ value.icon }}">
+  <h3>{{ value.heading }}</h3>
+  {{ value.body }}
+</div>
diff --git a/templates/blog/blocks/code_block.html b/templates/blog/blocks/code_block.html
new file mode 100644
index 0000000..7beb73e
--- /dev/null
+++ b/templates/blog/blocks/code_block.html
@@ -0,0 +1,5 @@
+{% load wagtailcore_tags %}
+<div class="code-block">
+  {% if value.filename %}<div>{{ value.filename }}</div>{% endif %}
+  <pre data-lang="{{ value.language }}"><code class="language-{{ value.language }}">{{ value.raw_code }}</code></pre>
+</div>
diff --git a/templates/blog/blocks/image_block.html b/templates/blog/blocks/image_block.html
new file mode 100644
index 0000000..081fedf
--- /dev/null
+++ b/templates/blog/blocks/image_block.html
@@ -0,0 +1,5 @@
+{% load wagtailimages_tags %}
+<figure>
+  {% image value.image width-1024 alt=value.alt %}
+  {% if value.caption %}<figcaption>{{ value.caption }}</figcaption>{% endif %}
+</figure>
diff --git a/templates/blog/blocks/pull_quote_block.html b/templates/blog/blocks/pull_quote_block.html
new file mode 100644
index 0000000..f971c12
--- /dev/null
+++ b/templates/blog/blocks/pull_quote_block.html
@@ -0,0 +1,4 @@
+<blockquote>
+  <p>{{ value.quote }}</p>
+  {% if value.attribution %}<cite>{{ value.attribution }}</cite>{% endif %}
+</blockquote>
diff --git a/templates/blog/home_page.html b/templates/blog/home_page.html
new file mode 100644
index 0000000..08bae09
--- /dev/null
+++ b/templates/blog/home_page.html
@@ -0,0 +1,31 @@
+{% extends 'base.html' %}
+{% load seo_tags %}
+{% block title %}No Hype AI{% endblock %}
+{% block head_meta %}
+  {% canonical_url page as canonical %}
+  <link rel="canonical" href="{{ canonical }}" />
+  <meta name="description" content="Honest AI coding tool reviews for developers." />
+  <meta property="og:type" content="website" />
+  <meta property="og:title" content="No Hype AI" />
+  <meta property="og:description" content="Honest AI coding tool reviews for developers." />
+  <meta property="og:url" content="{{ canonical }}" />
+{% endblock %}
+{% block content %}
+<section>
+  {% if featured_article %}
+    <h2>{{ featured_article.title }}</h2>
+    <p>{{ featured_article.author.name }}</p>
+    <p>{{ featured_article.read_time_mins }} min read</p>
+  {% endif %}
+</section>
+<section>
+  {% for article in latest_articles %}
+    {% include 'components/article_card.html' with article=article %}
+  {% endfor %}
+</section>
+<section>
+  {% for article in more_articles %}
+    {% include 'components/article_card.html' with article=article %}
+  {% endfor %}
+</section>
+{% endblock %}
diff --git a/templates/comments/confirm_bulk_approve.html b/templates/comments/confirm_bulk_approve.html
new file mode 100644
index 0000000..f97b46b
--- /dev/null
+++ b/templates/comments/confirm_bulk_approve.html
@@ -0,0 +1,53 @@
+{% extends 'wagtailadmin/bulk_actions/confirmation/base.html' %}
+{% load i18n wagtailusers_tags wagtailadmin_tags %}
+
+{% block titletag %}
+  {% if items|length == 1 %}
+    {% blocktrans trimmed with snippet_type_name=model_opts.verbose_name %}Approve {{ snippet_type_name }}{% endblocktrans %} - {{ items.0.item }}
+  {% else %}
+    {% blocktrans trimmed with count=items|length|intcomma %}Approve {{ count }} comments{% endblocktrans %}
+  {% endif %}
+{% endblock %}
+
+{% block header %}
+  {% trans "Approve" as approve_str %}
+  {% if items|length == 1 %}
+    {% include "wagtailadmin/shared/header.html" with title=approve_str subtitle=items.0.item icon=header_icon only %}
+  {% else %}
+    {% include "wagtailadmin/shared/header.html" with title=approve_str subtitle=model_opts.verbose_name_plural|capfirst icon=header_icon only %}
+  {% endif %}
+{% endblock header %}
+
+{% block items_with_access %}
+  {% if items %}
+    {% if items|length == 1 %}
+      <p>{% blocktrans trimmed with snippet_type_name=model_opts.verbose_name %}Approve this {{ snippet_type_name }}?{% endblocktrans %}</p>
+    {% else %}
+      <p>{% blocktrans trimmed with count=items|length|intcomma %}Approve {{ count }} selected comments?{% endblocktrans %}</p>
+      <ul>
+        {% for snippet in items %}
+          <li><a href="{{ snippet.edit_url }}" target="_blank" rel="noreferrer">{{ snippet.item }}</a></li>
+        {% endfor %}
+      </ul>
+    {% endif %}
+  {% endif %}
+{% endblock items_with_access %}
+
+{% block items_with_no_access %}
+  {% if items_with_no_access|length == 1 %}
+    {% trans "You don't have permission to approve this comment" as no_access_msg %}
+  {% else %}
+    {% trans "You don't have permission to approve these comments" as no_access_msg %}
+  {% endif %}
+  {% include 'wagtailsnippets/bulk_actions/list_items_with_no_access.html' with items=items_with_no_access no_access_msg=no_access_msg %}
+{% endblock items_with_no_access %}
+
+{% block form_section %}
+  {% if items %}
+    {% trans "Yes, approve" as action_button_text %}
+    {% trans "No, go back" as no_action_button_text %}
+    {% include 'wagtailadmin/bulk_actions/confirmation/form.html' %}
+  {% else %}
+    {% include 'wagtailadmin/bulk_actions/confirmation/go_back.html' %}
+  {% endif %}
+{% endblock form_section %}
diff --git a/templates/components/article_card.html b/templates/components/article_card.html
new file mode 100644
index 0000000..3d0501f
--- /dev/null
+++ b/templates/components/article_card.html
@@ -0,0 +1,8 @@
+{% load core_tags %}
+<article>
+  <a href="{{ article.url }}">{{ article.title }}</a>
+  <p>{{ article.summary|truncatewords:20 }}</p>
+  {% for tag in article.tags.all %}
+  <span class="{{ tag|get_tag_css }}">{{ tag.name }}</span>
+  {% endfor %}
+</article>
diff --git a/templates/components/cookie_banner.html b/templates/components/cookie_banner.html
new file mode 100644
index 0000000..c7859f7
--- /dev/null
+++ b/templates/components/cookie_banner.html
@@ -0,0 +1,27 @@
+{% if request.consent.requires_prompt %}
+<div id="cookie-banner">
+  <form method="post" action="{% url 'consent' %}">
+    {% csrf_token %}
+    <button type="submit" name="accept_all" value="1">Accept all</button>
+    <button type="submit" name="reject_all" value="1">Reject all</button>
+  </form>
+  <details>
+    <summary>Manage preferences</summary>
+    <form method="post" action="{% url 'consent' %}">
+      {% csrf_token %}
+      <label>
+        <input type="checkbox" name="analytics" value="1" />
+        Analytics cookies
+      </label>
+      <label>
+        <input type="checkbox" name="advertising" value="1" />
+        Advertising cookies
+      </label>
+      <button type="submit">Save preferences</button>
+    </form>
+  </details>
+  {% if site_settings and site_settings.privacy_policy_page %}
+    <a href="{{ site_settings.privacy_policy_page.url }}">Privacy Policy</a>
+  {% endif %}
+</div>
+{% endif %}
diff --git a/templates/components/footer.html b/templates/components/footer.html
new file mode 100644
index 0000000..4d77528
--- /dev/null
+++ b/templates/components/footer.html
@@ -0,0 +1,8 @@
+{% load core_tags %}
+<footer>
+  {% get_legal_pages as legal_pages %}
+  {% include 'components/newsletter_form.html' with source='footer' label='Newsletter' %}
+  {% for page in legal_pages %}
+    <a href="{{ page.url }}">{{ page.title }}</a>
+  {% endfor %}
+</footer>
diff --git a/templates/components/nav.html b/templates/components/nav.html
new file mode 100644
index 0000000..8749b1b
--- /dev/null
+++ b/templates/components/nav.html
@@ -0,0 +1,7 @@
+<nav>
+  <a href="/">Home</a>
+  <a href="/articles/">Articles</a>
+  <a href="/about/">About</a>
+  <button type="button" data-theme-toggle>Toggle theme</button>
+  {% include 'components/newsletter_form.html' with source='nav' label='Get updates' %}
+</nav>
diff --git a/templates/components/newsletter_form.html b/templates/components/newsletter_form.html
new file mode 100644
index 0000000..342b3f5
--- /dev/null
+++ b/templates/components/newsletter_form.html
@@ -0,0 +1,11 @@
+<form method="post" action="/newsletter/subscribe/" data-newsletter-form>
+  {% csrf_token %}
+  <input type="hidden" name="source" value="{{ source|default:'unknown' }}" />
+  <label>
+    <span>{{ label|default:"Newsletter" }}</span>
+    <input type="email" name="email" required />
+  </label>
+  <input type="text" name="honeypot" style="display:none" />
+  <button type="submit">Subscribe</button>
+  <p data-newsletter-message aria-live="polite"></p>
+</form>
diff --git a/templates/core/robots.txt b/templates/core/robots.txt
new file mode 100644
index 0000000..d8b232d
--- /dev/null
+++ b/templates/core/robots.txt
@@ -0,0 +1,3 @@
+User-agent: *
+Disallow: /cms/
+Sitemap: {{ request.scheme }}://{{ request.get_host }}/sitemap.xml
diff --git a/templates/legal/legal_page.html b/templates/legal/legal_page.html
new file mode 100644
index 0000000..b472096
--- /dev/null
+++ b/templates/legal/legal_page.html
@@ -0,0 +1,7 @@
+{% extends 'base.html' %}
+{% load wagtailcore_tags %}
+{% block content %}
+<h1>{{ page.title }}</h1>
+<p>Last updated: {{ page.last_updated|date:'F Y' }}</p>
+{{ page.body|richtext }}
+{% endblock %}
diff --git a/templates/newsletter/email/confirmation_body.html b/templates/newsletter/email/confirmation_body.html
new file mode 100644
index 0000000..4ccdaff
--- /dev/null
+++ b/templates/newsletter/email/confirmation_body.html
@@ -0,0 +1,13 @@
+<!doctype html>
+<html>
+  <body style="font-family: Arial, sans-serif; line-height: 1.5;">
+    <p>Hi,</p>
+    <p>Please confirm your newsletter subscription by clicking the button below:</p>
+    <p>
+      <a href="{{ confirmation_url }}" style="display:inline-block;padding:10px 14px;background:#111;color:#fff;text-decoration:none;">
+        Confirm Subscription
+      </a>
+    </p>
+    <p>If you did not request this, you can ignore this email.</p>
+  </body>
+</html>
diff --git a/templates/newsletter/email/confirmation_body.txt b/templates/newsletter/email/confirmation_body.txt
new file mode 100644
index 0000000..c659687
--- /dev/null
+++ b/templates/newsletter/email/confirmation_body.txt
@@ -0,0 +1,7 @@
+Hi,
+
+Please confirm your newsletter subscription by visiting this link:
+
+{{ confirmation_url }}
+
+If you did not request this, you can ignore this email.
diff --git a/templates/newsletter/email/confirmation_subject.txt b/templates/newsletter/email/confirmation_subject.txt
new file mode 100644
index 0000000..ba47691
--- /dev/null
+++ b/templates/newsletter/email/confirmation_subject.txt
@@ -0,0 +1 @@
+Confirm your No Hype AI newsletter subscription
diff --git a/theme/__init__.py b/theme/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/theme/apps.py b/theme/apps.py
new file mode 100644
index 0000000..f656ab4
--- /dev/null
+++ b/theme/apps.py
@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class ThemeConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "theme"
diff --git a/theme/static/css/styles.css b/theme/static/css/styles.css
new file mode 100644
index 0000000..0798e68
--- /dev/null
+++ b/theme/static/css/styles.css
@@ -0,0 +1 @@
+*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }/*! tailwindcss v3.4.19 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.static{position:static}.block{display:block}.hidden{display:none}
\ No newline at end of file
diff --git a/theme/static_src/package-lock.json b/theme/static_src/package-lock.json
new file mode 100644
index 0000000..6af33a5
--- /dev/null
+++ b/theme/static_src/package-lock.json
@@ -0,0 +1,944 @@
+{
+  "name": "nohype-theme",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "nohype-theme",
+      "version": "1.0.0",
+      "devDependencies": {
+        "tailwindcss": "^3.4.17"
+      }
+    },
+    "node_modules/@alloc/quick-lru": {
+      "version": "5.2.0",
+      "resolved": "https://registry.npmjs.org/@alloc/quick-lru/-/quick-lru-5.2.0.tgz",
+      "integrity": "sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==",
+      "dev": true,
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/@jridgewell/gen-mapping": {
+      "version": "0.3.13",
+      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
+      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
+      "dev": true,
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.0",
+        "@jridgewell/trace-mapping": "^0.3.24"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
+      "dev": true,
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "dev": true
+    },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.31",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
+      "integrity": "sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==",
+      "dev": true,
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.1.0",
+        "@jridgewell/sourcemap-codec": "^1.4.14"
+      }
+    },
+    "node_modules/@nodelib/fs.scandir": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.scandir/-/fs.scandir-2.1.5.tgz",
+      "integrity": "sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==",
+      "dev": true,
+      "dependencies": {
+        "@nodelib/fs.stat": "2.0.5",
+        "run-parallel": "^1.1.9"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.stat": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-2.0.5.tgz",
+      "integrity": "sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==",
+      "dev": true,
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/@nodelib/fs.walk": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/@nodelib/fs.walk/-/fs.walk-1.2.8.tgz",
+      "integrity": "sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==",
+      "dev": true,
+      "dependencies": {
+        "@nodelib/fs.scandir": "2.1.5",
+        "fastq": "^1.6.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/any-promise": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/any-promise/-/any-promise-1.3.0.tgz",
+      "integrity": "sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==",
+      "dev": true
+    },
+    "node_modules/anymatch": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/anymatch/-/anymatch-3.1.3.tgz",
+      "integrity": "sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==",
+      "dev": true,
+      "dependencies": {
+        "normalize-path": "^3.0.0",
+        "picomatch": "^2.0.4"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/arg": {
+      "version": "5.0.2",
+      "resolved": "https://registry.npmjs.org/arg/-/arg-5.0.2.tgz",
+      "integrity": "sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==",
+      "dev": true
+    },
+    "node_modules/binary-extensions": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.3.0.tgz",
+      "integrity": "sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==",
+      "dev": true,
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/braces": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/braces/-/braces-3.0.3.tgz",
+      "integrity": "sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==",
+      "dev": true,
+      "dependencies": {
+        "fill-range": "^7.1.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/camelcase-css": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/camelcase-css/-/camelcase-css-2.0.1.tgz",
+      "integrity": "sha512-QOSvevhslijgYwRx6Rv7zKdMF8lbRmx+uQGx2+vDc+KI/eBnsy9kit5aj23AgGu3pa4t9AgwbnXWqS+iOY+2aA==",
+      "dev": true,
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/chokidar": {
+      "version": "3.6.0",
+      "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz",
+      "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==",
+      "dev": true,
+      "dependencies": {
+        "anymatch": "~3.1.2",
+        "braces": "~3.0.2",
+        "glob-parent": "~5.1.2",
+        "is-binary-path": "~2.1.0",
+        "is-glob": "~4.0.1",
+        "normalize-path": "~3.0.0",
+        "readdirp": "~3.6.0"
+      },
+      "engines": {
+        "node": ">= 8.10.0"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.2"
+      }
+    },
+    "node_modules/chokidar/node_modules/glob-parent": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+      "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==",
+      "dev": true,
+      "dependencies": {
+        "is-glob": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/commander": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-4.1.1.tgz",
+      "integrity": "sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==",
+      "dev": true,
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/cssesc": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/cssesc/-/cssesc-3.0.0.tgz",
+      "integrity": "sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==",
+      "dev": true,
+      "bin": {
+        "cssesc": "bin/cssesc"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/didyoumean": {
+      "version": "1.2.2",
+      "resolved": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz",
+      "integrity": "sha512-gxtyfqMg7GKyhQmb056K7M3xszy/myH8w+B4RT+QXBQsvAOdc3XymqDDPHx1BgPgsdAA5SIifona89YtRATDzw==",
+      "dev": true
+    },
+    "node_modules/dlv": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/dlv/-/dlv-1.1.3.tgz",
+      "integrity": "sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA==",
+      "dev": true
+    },
+    "node_modules/fast-glob": {
+      "version": "3.3.3",
+      "resolved": "https://registry.npmjs.org/fast-glob/-/fast-glob-3.3.3.tgz",
+      "integrity": "sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==",
+      "dev": true,
+      "dependencies": {
+        "@nodelib/fs.stat": "^2.0.2",
+        "@nodelib/fs.walk": "^1.2.3",
+        "glob-parent": "^5.1.2",
+        "merge2": "^1.3.0",
+        "micromatch": "^4.0.8"
+      },
+      "engines": {
+        "node": ">=8.6.0"
+      }
+    },
+    "node_modules/fast-glob/node_modules/glob-parent": {
+      "version": "5.1.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz",
+      "integrity": "sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==",
+      "dev": true,
+      "dependencies": {
+        "is-glob": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/fastq": {
+      "version": "1.20.1",
+      "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.20.1.tgz",
+      "integrity": "sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==",
+      "dev": true,
+      "dependencies": {
+        "reusify": "^1.0.4"
+      }
+    },
+    "node_modules/fill-range": {
+      "version": "7.1.1",
+      "resolved": "https://registry.npmjs.org/fill-range/-/fill-range-7.1.1.tgz",
+      "integrity": "sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==",
+      "dev": true,
+      "dependencies": {
+        "to-regex-range": "^5.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "dev": true,
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/glob-parent": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/glob-parent/-/glob-parent-6.0.2.tgz",
+      "integrity": "sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==",
+      "dev": true,
+      "dependencies": {
+        "is-glob": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
+      "integrity": "sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==",
+      "dev": true,
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/is-binary-path": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz",
+      "integrity": "sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==",
+      "dev": true,
+      "dependencies": {
+        "binary-extensions": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/is-core-module": {
+      "version": "2.16.1",
+      "resolved": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz",
+      "integrity": "sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==",
+      "dev": true,
+      "dependencies": {
+        "hasown": "^2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/is-extglob": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
+      "integrity": "sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/is-glob": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
+      "integrity": "sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==",
+      "dev": true,
+      "dependencies": {
+        "is-extglob": "^2.1.1"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/is-number": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz",
+      "integrity": "sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.12.0"
+      }
+    },
+    "node_modules/jiti": {
+      "version": "1.21.7",
+      "resolved": "https://registry.npmjs.org/jiti/-/jiti-1.21.7.tgz",
+      "integrity": "sha512-/imKNG4EbWNrVjoNC/1H5/9GFy+tqjGBHCaSsN+P2RnPqjsLmv6UD3Ej+Kj8nBWaRAwyk7kK5ZUc+OEatnTR3A==",
+      "dev": true,
+      "bin": {
+        "jiti": "bin/jiti.js"
+      }
+    },
+    "node_modules/lilconfig": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/lilconfig/-/lilconfig-3.1.3.tgz",
+      "integrity": "sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw==",
+      "dev": true,
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/antonk52"
+      }
+    },
+    "node_modules/lines-and-columns": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz",
+      "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==",
+      "dev": true
+    },
+    "node_modules/merge2": {
+      "version": "1.4.1",
+      "resolved": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
+      "integrity": "sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==",
+      "dev": true,
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/micromatch": {
+      "version": "4.0.8",
+      "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz",
+      "integrity": "sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==",
+      "dev": true,
+      "dependencies": {
+        "braces": "^3.0.3",
+        "picomatch": "^2.3.1"
+      },
+      "engines": {
+        "node": ">=8.6"
+      }
+    },
+    "node_modules/mz": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/mz/-/mz-2.7.0.tgz",
+      "integrity": "sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==",
+      "dev": true,
+      "dependencies": {
+        "any-promise": "^1.0.0",
+        "object-assign": "^4.0.1",
+        "thenify-all": "^1.0.0"
+      }
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.11",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.11.tgz",
+      "integrity": "sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/normalize-path": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz",
+      "integrity": "sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/object-assign": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+      "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/object-hash": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/object-hash/-/object-hash-3.0.0.tgz",
+      "integrity": "sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==",
+      "dev": true,
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/path-parse": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz",
+      "integrity": "sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==",
+      "dev": true
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "dev": true
+    },
+    "node_modules/picomatch": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.3.1.tgz",
+      "integrity": "sha512-JU3teHTNjmE2VCGFzuY8EXzCDVwEqB2a8fsIvwaStHhAWJEeVd1o1QD80CU6+ZdEXXSLbSsuLwJjkCBWqRQUVA==",
+      "dev": true,
+      "engines": {
+        "node": ">=8.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/pify": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz",
+      "integrity": "sha512-udgsAY+fTnvv7kI7aaxbqwWNb0AHiB0qBO89PZKPkoTmGOgdbrHDKD+0B2X4uTfJ/FT1R09r9gTsjUjNJotuog==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/pirates": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/pirates/-/pirates-4.0.7.tgz",
+      "integrity": "sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==",
+      "dev": true,
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.6",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.6.tgz",
+      "integrity": "sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "dependencies": {
+        "nanoid": "^3.3.11",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/postcss-import": {
+      "version": "15.1.0",
+      "resolved": "https://registry.npmjs.org/postcss-import/-/postcss-import-15.1.0.tgz",
+      "integrity": "sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==",
+      "dev": true,
+      "dependencies": {
+        "postcss-value-parser": "^4.0.0",
+        "read-cache": "^1.0.0",
+        "resolve": "^1.1.7"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      },
+      "peerDependencies": {
+        "postcss": "^8.0.0"
+      }
+    },
+    "node_modules/postcss-js": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/postcss-js/-/postcss-js-4.1.0.tgz",
+      "integrity": "sha512-oIAOTqgIo7q2EOwbhb8UalYePMvYoIeRY2YKntdpFQXNosSu3vLrniGgmH9OKs/qAkfoj5oB3le/7mINW1LCfw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "dependencies": {
+        "camelcase-css": "^2.0.1"
+      },
+      "engines": {
+        "node": "^12 || ^14 || >= 16"
+      },
+      "peerDependencies": {
+        "postcss": "^8.4.21"
+      }
+    },
+    "node_modules/postcss-load-config": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-6.0.1.tgz",
+      "integrity": "sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "dependencies": {
+        "lilconfig": "^3.1.1"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "peerDependencies": {
+        "jiti": ">=1.21.0",
+        "postcss": ">=8.0.9",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "jiti": {
+          "optional": true
+        },
+        "postcss": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/postcss-nested": {
+      "version": "6.2.0",
+      "resolved": "https://registry.npmjs.org/postcss-nested/-/postcss-nested-6.2.0.tgz",
+      "integrity": "sha512-HQbt28KulC5AJzG+cZtj9kvKB93CFCdLvog1WFLf1D+xmMvPGlBstkpTEZfK5+AN9hfJocyBFCNiqyS48bpgzQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "dependencies": {
+        "postcss-selector-parser": "^6.1.1"
+      },
+      "engines": {
+        "node": ">=12.0"
+      },
+      "peerDependencies": {
+        "postcss": "^8.2.14"
+      }
+    },
+    "node_modules/postcss-selector-parser": {
+      "version": "6.1.2",
+      "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.1.2.tgz",
+      "integrity": "sha512-Q8qQfPiZ+THO/3ZrOrO0cJJKfpYCagtMUkXbnEfmgUjwXg6z/WBeOyS9APBBPCTSiDV+s4SwQGu8yFsiMRIudg==",
+      "dev": true,
+      "dependencies": {
+        "cssesc": "^3.0.0",
+        "util-deprecate": "^1.0.2"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/postcss-value-parser": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-4.2.0.tgz",
+      "integrity": "sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==",
+      "dev": true
+    },
+    "node_modules/queue-microtask": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/queue-microtask/-/queue-microtask-1.2.3.tgz",
+      "integrity": "sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ]
+    },
+    "node_modules/read-cache": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/read-cache/-/read-cache-1.0.0.tgz",
+      "integrity": "sha512-Owdv/Ft7IjOgm/i0xvNDZ1LrRANRfew4b2prF3OWMQLxLfu3bS8FVhCsrSCMK4lR56Y9ya+AThoTpDCTxCmpRA==",
+      "dev": true,
+      "dependencies": {
+        "pify": "^2.3.0"
+      }
+    },
+    "node_modules/readdirp": {
+      "version": "3.6.0",
+      "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-3.6.0.tgz",
+      "integrity": "sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==",
+      "dev": true,
+      "dependencies": {
+        "picomatch": "^2.2.1"
+      },
+      "engines": {
+        "node": ">=8.10.0"
+      }
+    },
+    "node_modules/resolve": {
+      "version": "1.22.11",
+      "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.22.11.tgz",
+      "integrity": "sha512-RfqAvLnMl313r7c9oclB1HhUEAezcpLjz95wFH4LVuhk9JF/r22qmVP9AMmOU4vMX7Q8pN8jwNg/CSpdFnMjTQ==",
+      "dev": true,
+      "dependencies": {
+        "is-core-module": "^2.16.1",
+        "path-parse": "^1.0.7",
+        "supports-preserve-symlinks-flag": "^1.0.0"
+      },
+      "bin": {
+        "resolve": "bin/resolve"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/reusify": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz",
+      "integrity": "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==",
+      "dev": true,
+      "engines": {
+        "iojs": ">=1.0.0",
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/run-parallel": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.2.0.tgz",
+      "integrity": "sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "dependencies": {
+        "queue-microtask": "^1.2.2"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "dev": true,
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/sucrase": {
+      "version": "3.35.1",
+      "resolved": "https://registry.npmjs.org/sucrase/-/sucrase-3.35.1.tgz",
+      "integrity": "sha512-DhuTmvZWux4H1UOnWMB3sk0sbaCVOoQZjv8u1rDoTV0HTdGem9hkAZtl4JZy8P2z4Bg0nT+YMeOFyVr4zcG5Tw==",
+      "dev": true,
+      "dependencies": {
+        "@jridgewell/gen-mapping": "^0.3.2",
+        "commander": "^4.0.0",
+        "lines-and-columns": "^1.1.6",
+        "mz": "^2.7.0",
+        "pirates": "^4.0.1",
+        "tinyglobby": "^0.2.11",
+        "ts-interface-checker": "^0.1.9"
+      },
+      "bin": {
+        "sucrase": "bin/sucrase",
+        "sucrase-node": "bin/sucrase-node"
+      },
+      "engines": {
+        "node": ">=16 || 14 >=14.17"
+      }
+    },
+    "node_modules/supports-preserve-symlinks-flag": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz",
+      "integrity": "sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==",
+      "dev": true,
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/tailwindcss": {
+      "version": "3.4.19",
+      "resolved": "https://registry.npmjs.org/tailwindcss/-/tailwindcss-3.4.19.tgz",
+      "integrity": "sha512-3ofp+LL8E+pK/JuPLPggVAIaEuhvIz4qNcf3nA1Xn2o/7fb7s/TYpHhwGDv1ZU3PkBluUVaF8PyCHcm48cKLWQ==",
+      "dev": true,
+      "dependencies": {
+        "@alloc/quick-lru": "^5.2.0",
+        "arg": "^5.0.2",
+        "chokidar": "^3.6.0",
+        "didyoumean": "^1.2.2",
+        "dlv": "^1.1.3",
+        "fast-glob": "^3.3.2",
+        "glob-parent": "^6.0.2",
+        "is-glob": "^4.0.3",
+        "jiti": "^1.21.7",
+        "lilconfig": "^3.1.3",
+        "micromatch": "^4.0.8",
+        "normalize-path": "^3.0.0",
+        "object-hash": "^3.0.0",
+        "picocolors": "^1.1.1",
+        "postcss": "^8.4.47",
+        "postcss-import": "^15.1.0",
+        "postcss-js": "^4.0.1",
+        "postcss-load-config": "^4.0.2 || ^5.0 || ^6.0",
+        "postcss-nested": "^6.2.0",
+        "postcss-selector-parser": "^6.1.2",
+        "resolve": "^1.22.8",
+        "sucrase": "^3.35.0"
+      },
+      "bin": {
+        "tailwind": "lib/cli.js",
+        "tailwindcss": "lib/cli.js"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/thenify": {
+      "version": "3.3.1",
+      "resolved": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz",
+      "integrity": "sha512-RVZSIV5IG10Hk3enotrhvz0T9em6cyHBLkH/YAZuKqd8hRkKhSfCGIcP2KUY0EPxndzANBmNllzWPwak+bheSw==",
+      "dev": true,
+      "dependencies": {
+        "any-promise": "^1.0.0"
+      }
+    },
+    "node_modules/thenify-all": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/thenify-all/-/thenify-all-1.6.0.tgz",
+      "integrity": "sha512-RNxQH/qI8/t3thXJDwcstUO4zeqo64+Uy/+sNVRBx4Xn2OX+OZ9oP+iJnNFqplFra2ZUVeKCSa2oVWi3T4uVmA==",
+      "dev": true,
+      "dependencies": {
+        "thenify": ">= 3.1.0 < 4"
+      },
+      "engines": {
+        "node": ">=0.8"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.15",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
+      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
+      "dev": true,
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.3"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/tinyglobby/node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/tinyglobby/node_modules/picomatch": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
+      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "dev": true,
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/to-regex-range": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz",
+      "integrity": "sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==",
+      "dev": true,
+      "dependencies": {
+        "is-number": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=8.0"
+      }
+    },
+    "node_modules/ts-interface-checker": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/ts-interface-checker/-/ts-interface-checker-0.1.13.tgz",
+      "integrity": "sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==",
+      "dev": true
+    },
+    "node_modules/util-deprecate": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
+      "integrity": "sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==",
+      "dev": true
+    }
+  }
+}
diff --git a/theme/static_src/package.json b/theme/static_src/package.json
new file mode 100644
index 0000000..608e777
--- /dev/null
+++ b/theme/static_src/package.json
@@ -0,0 +1,12 @@
+{
+  "name": "nohype-theme",
+  "version": "1.0.0",
+  "private": true,
+  "scripts": {
+    "build": "tailwindcss -i ./src/input.css -o ../static/css/styles.css --minify",
+    "dev": "tailwindcss -i ./src/input.css -o ../static/css/styles.css --watch"
+  },
+  "devDependencies": {
+    "tailwindcss": "^3.4.17"
+  }
+}
diff --git a/theme/static_src/src/input.css b/theme/static_src/src/input.css
new file mode 100644
index 0000000..b5c61c9
--- /dev/null
+++ b/theme/static_src/src/input.css
@@ -0,0 +1,3 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
diff --git a/theme/static_src/tailwind.config.js b/theme/static_src/tailwind.config.js
new file mode 100644
index 0000000..dc5cbfc
--- /dev/null
+++ b/theme/static_src/tailwind.config.js
@@ -0,0 +1,10 @@
+module.exports = {
+  content: [
+    "../../templates/**/*.html",
+    "../../apps/**/templates/**/*.html"
+  ],
+  theme: {
+    extend: {}
+  },
+  plugins: []
+};