Deployment & Hardening

Deployment & Hardening Guide

Production Architecture

1. Frontend: Firebase Hosting static app with anti-caching headers (no-cache, no-store, must-revalidate).
2. Backend: FastAPI 2.1 service behind managed TLS proxy with CORS restriction.

Minimum Security Hardening Actions

1. Replace wildcard CORS with explicit origins.
2. Authenticate compute endpoints and set per-user quotas.
3. Enforce request-body, upload, array-length, execution-time, and response-size limits.
4. Run Python execution inside disposable microVMs or network-disabled containers.
5. Sanitize error responses in production environments.