Architecture

kenneth is a portfolio first. Every page works without the assistant. The assistant is an add-on that finds facts already published on this site. When it is off, rate limited, over budget, or the provider fails, the panel shows plain links to Projects, Experience, Resume, and Contact.

1. The browser sends the conversation to POST /api/chat, using the app's HTTP client.
2. The server checks the feature switch, a per-visitor rate limit, and that one request per visitor runs at a time. It then validates the body: size, roles, text length, and that the page the visitor says they are on is a real page.
3. The server counts the request against an app-wide daily budget. Invalid requests are rejected before this step and spend nothing.
4. The model runs on Cloudflare Workers AI. The default model is @cf/zai-org/glm-4.7-flash; each evaluation run records the model it used. A request has at most 3 model steps, 1,024 output tokens, and a 25 second timeout.
5. On the first step the model must call a retrieval tool. A second tool can ask for a result card.
6. The server resolves citations and cards from its own registry, then streams typed parts: text, sources, notices, and activity.
7. The browser renders those parts as plain text and a fixed set of cards. It never renders model-written markup or links.

The portfolio corpus is a small set of typed, validated records: projects, experience, education, skills, and one evidence source. Search is deterministic: technology and title matches outrank prose. There is no vector database. A vector store would be justified only if measured retrieval failures showed keyword search missing relevant content; no such measurement exists.

• Nine read-only tools read the public registry: getSkills, getProfile, searchProjects, getProject, getExperience, getEducation, getSkillEvidence, getContactOptions, and suggestNavigation. None can fetch a URL, read a file, run a command, or change data.
• Every record carries an ID and the IDs of its sources. The model cites a record with its ID in square brackets.
• The server keeps a citation only if a tool returned that ID during the same request. It then attaches the title and link itself. A link the model writes never becomes a link.
• If the tools find nothing, the server writes a fixed reply instead of letting the model answer from general knowledge. Text written before any tool returned real portfolio content is dropped.

• No web retrieval, no write tools, and no access to repositories, email, or databases.
• No stored chat history. A conversation lives in the visitor's browser tab.
• No distributed rate limit yet. The guard is in memory, so it limits one server instance, not all of them. That is a launch task, not a finished control.
• No architecture diagram block. No approved diagram exists, so the card type is not built.