5-char slugs over a 32-char alphabet are ~25 bits; brute-forceable at
HTTP speeds once the endpoint is public. 8 chars = 40 bits (~10^12
combinations), infeasible to scan within useful timescales. Existing
5-char slugs still resolve; only new artifacts use the longer form.
Self-hosted HTML artifact publisher. Single Go binary, SQLite metadata,
HTML on disk. Features: password-protected artifacts, per-artifact expiration,
admin dashboard with view metrics (privacy-preserving daily-salt visitor hash,
sparklines, 30-day SVG chart, top referrers), rate-limited unlock endpoint.
Packaged as a Docker image (two-stage, CGO_ENABLED=0, pure-Go SQLite).
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
