Smarter isolates its tenants in Django with two queryset methods, with_read_permission_for() and with_ownership_permission_for(), that every lookup of a user’s resource starts from, plus a profile switcher whose choice is checked against the user on the way in and again on…
Smarter reads all of its configuration through a Pydantic Settings class, smarter.common.conf.Settings, whose one instance, smarter_settings, is built before Django’s settings module runs, and supplies it. Every environment variable that Smarter reads is typed, validated against business rules, and turned…
Smarter, a Django platform for LLM applications, keeps credentials out of its logs with four habits. Secrets are typed so they can’t print, log helpers leave out the fields that matter, tests assert that a known secret never appears in…
Smarter publishes its Helm chart to GitHub’s container registry signed with cosign, scans its container images in Amazon ECR when they are pushed, publishes its npm packages with provenance, and installs the AWS CLI for its database backups only after…
Smarter publishes its whole REST API as one OpenAPI 3.1 document, openapi.json, plus a JSON Schema for every manifest kind. That OpenAPI document is Smarter’s extensibility model. It’s generated from the platform’s own Pydantic models, committed to the repository, tested…