Blog

Thoughts on zero-runtime architecture, signals, and the future of web frameworks.

2026-06-20

Sentinel mXSS: Why Provenance Beats Sanitizers

Every SPA router that uses innerHTML to swap pages is vulnerable to mutation XSS. NoopJS takes a different approach — provable immunity through provenance verification.

2026-06-15

NoopJS v1: Zero-Runtime, Real Numbers

NoopJS 1.0 is here. Ships 0 KB on static pages, 466 B on interactive. A real demo with 6 routes, 192 unit tests, 22 e2e tests — all green.