A private WordPress editor and a static public site can provide a comfortable writing workflow without exposing the CMS to the internet.
Why separate editing from publishing?
The editing origin keeps drafts, media, accounts, and database access on the protected network. The generated artifact contains only files a public reader needs.

The bounded publishing loop
- Write and preview privately.
- Generate a fresh static artifact.
- Validate links, assets, and secrets before deployment.
generate -> validate -> canary -> approve -> publish
This acceptance post is deliberately small, but it exercises headings, metadata, taxonomy, images, lists, code, feeds, archives, and URL rewriting.