一个内核，两个界面

站点与应用读取同一份事实。改动一次，二者便一同变更。

以度量为凭，而非空口承诺

来自一个合为一体打造的平台的四个数字。

构建 — 一个内核，两个界面，一道关卡

正是这四个部件让它成为现实。请依序阅读：事实本身、遵从事实的两张面孔， 以及那道不让任何一方迟缓交付的关卡。
代码保持英文 — 技术的通用语言。

// MatchTop · the core — one definition both surfaces obey.
// Written once. The portal and the field app read the same truth — they cannot drift.

type Case = {
  id:       Uuid,
  status:   "open" | "review" | "closed",
  locale:   Locale,        // one language list, honoured by both surfaces
  updated:  Instant,       // stamped at the edge — one clock for web and app
}

service Portal {
  get  case(id)           -> Case
  list cases(for: Holder) -> Case[]
}

<!-- the web surface · server-rendered at the edge, zero JS to read a case -->
<article class="case" lang="{{ case.locale }}">
  <h1>{{ t("case.title", case.id) }}</h1>
  <p class="status status--{{ case.status }}">{{ t("status." + case.status) }}</p>
  <time datetime="{{ case.updated }}">{{ t.date(case.updated) }}</time>
</article>

// same Case. same locale list. no bundle to boot before the page can be read.

// the app surface · the same contract, compiled. A wrong field will not build.
#[derive(Deserialize)]
struct Case {
    id: Uuid,
    status: Status,     // an enum, not a loose string — the compiler holds the line
    locale: Locale,
    updated: Instant,
}

impl Case {
    /// Works offline: the last truth we fetched is still the same shape.
    fn is_open(&self) -> bool {
        matches!(self.status, Status::Open | Status::Review)
    }
}

"""MatchTop · the gate — one standard over both surfaces.
Standard library only. It runs in your pipeline, and it can say no to either face."""

import sys

BUDGET = {"first_paint_ms": 100, "js_kb": 0, "a11y": "AA"}   # promised, so measured


def gate(surface: str, got: dict) -> None:
    fails = [k for k, limit in BUDGET.items()
             if _worse(got[k], limit)]              # every promise is a test
    if fails:
        print(f"HELD · {surface} · " + ", ".join(fails))
        sys.exit(1)                             # neither the site nor the app ships below the line
    print(f"GREEN · {surface} · measured, and worthy of your name on it")

无法被复制的东西

为何以一个工坊承揽整体，胜过在接缝处拼接起来的两家供应商。

这并非因一次买两样东西而给的折扣。它是一种截然不同的形态： 一个拥有两张面孔的系统，而非两个胶带粘合在一起的系统。一家只卖站点、 把应用转包出去的作坊根本无法交给您一个共同的内核 — 因为它们压根没有。这正是 无法被压价夺走的部分。

严守机密

在落笔写下第一行之前，先讲明如何守护您的成果。这一部分没有商量余地。