The parts of this that are engineering rather than opinion.
A rights manager that refuses to publish, a card generator exposed as a service, a read-only mode for the night the commerce layer saturates, and a queue for the fifty to hundred times spike that a series release puts through a website.
Five pages about how it works.
The rights manager
Every asset carries a rights status, an Amazon window and a geographic scope, and publishing is blocked when a window…
The Chapter Card API
The card generator behind every chapter on this site, exposed to certified producers under a narrow contract.
When it breaks
A mode that keeps the content and the cameras alive when commerce saturates, plus the hundred-times load test before every…
The queue
An edge queue for release night, when traffic goes up by fifty to a hundred times in about four minutes.
The stack
How five hundred pages are actually produced, and why the content library is a plain PHP array rather than a…
Why any of this is on a public website.
Because the interesting part of a platform is not the pages, it is the constraints. A rights manager that will not let somebody publish a clip in a country where the window is shut is a more useful thing to describe than another page of features.
And because every one of these five is a decision with a cost attached. The queue costs money on a night when nothing goes wrong. The read-only mode is work that is invisible until the one evening it is the only thing keeping the site up. The rights manager makes publishing slower on purpose.
A build that only documents the parts that worked is a brochure. These five are the parts that would be argued about in a real project, so they get pages.
What each one costs, and what it buys.
| System | What it costs | What it buys | When you find out it was worth it |
|---|---|---|---|
| The rights manager | Slower publishing, and a named approver on every override | Nobody publishing into a closed window by accident | The first time somebody tries |
| The Chapter Card API | A versioned contract and a certification process | The naming system spreading without the brand losing control of it | When somebody else’s card looks right |
| Read-only degradation | Engineering nobody sees for months | Content and cameras staying up when the basket falls over | On one evening, badly |
| The waiting room | Running cost on every ordinary night | A release night that does not become an outage | Twice a year, for about four minutes |
| The generator stack | A build step between writing and publishing | Five hundred pages that are consistent because they are generated | Every single day |
Five systems, in one line each.
Rights
Blocked by default when a window is shut.
The card API
A service, under a narrow contract.
Read-only
Content lives when commerce dies.
The queue
Fifty to a hundred times, in four minutes.
The stack
Python in, PHP arrays out.
The machine room, questioned.
The generator stack is — every page on this site comes out of it. The other four are described as they would be built, and this build has no commerce, no rights holder and no release night.
Because a platform is defined by what it does when things go wrong, and every operator reading this already knows their own version of the same evening.
Start with the one that blocks publishing.
Rights status, Amazon windows, geography, and no override without a named approver.
First sight of every drop
The things that sell out do it in minutes. This is the only warning anyone gets.