Strategic Hub Project Specification
The Strategic Hub is a secure corporate document containment system and workspace coordination portal. Built as a mock intranet for a high-security corporate entity, the project represents a showcase of secure API design, transactional SQL, and glassmorphic micro-animations.
Risk Reduction & Governance
The platform mitigates corporate compliance risk (addressing ISO 27001 and SOC 2 requirements) by enforcing strict document boundaries. By replacing password rotations with biometric sign-ins, it reduces credential theft vectors. Multi-level manager approval loops ensure high-value documents cannot be altered or deleted without formal oversight, preserving corporate assets.
Scale & Performance Efficiency
Designed for high concurrency and sub-millisecond response profiles. The decoupled Next.js static client runs logic client-side, reducing server computation. The Rust backend handles high request-per-second loads with minimal RAM usage, while connection pooling and Redis caches eliminate latency bottlenecks.
Core Operational Workflows
1. Intranet File Explorer
An intuitive document repository layout designed for high employee adoption. Supports single-level database queries for fast navigation. Displays metadata details including clearance labels, shared links, and active editing locks.
2. Access Control Model
Enforces directory visibility by matching folder shares against user roles. Document owners delegate viewer (read-only) or editor (write) credentials to prevent unauthorized internal data leakage.
3. Approval Queue Lifecycle
Restricts critical actions by routing moves, deletes, and security downgrades to a supervisor queue. Approved changes are committed immediately, while rejections are logged to prevent unapproved edits.
Core Project Pillars
Asynchronous Rust Core
An high-performance server built with Actix-Web, asynchronous SQLx connections to Postgres, and Redis caching for low-latency request-response cycles.
Cryptographic Access Clearance
Four data classification levels (Terbuka, Terhad, Sulit, Rahsia) coupled with passwordless WebAuthn (Passkeys) for secure user authentication.
Audited Governance Flow
A custom 4-stage approval workflow. Changes like classification shifts, file unlocking, or trashing require formal supervisor review.
Immutable Activity Ledger
Comprehensive audit logging tracking every transaction: IP tracking, HTTP verb methods, user associations, and payload metadata.