[suriya4code]

Requested by AK · project thread

Summary

Adds a static product landing page for GitHub Pages, served from the repo root (index.html + site/). .nojekyll makes Pages serve the files as-is, without running Jekyll.

• Hero: a canvas-drawn 3D ball of pangolin scales (Fibonacci sphere, lit and depth-sorted) that follows the cursor and curls shut as you scroll. The Lock the ball button seals it with a green ring.
• Sections: the demo video in a macOS window frame, Hide vs Lock, the 9-feature grid, an animated crypto pipeline (password → PBKDF2 → HKDF → AES-256-GCM → verify) with a plaintext-to-ciphertext scramble, the architecture layers plus assets/architecture.png, and build/test commands with copy buttons.
• Live star count from the GitHub API, a favicon, an Open Graph/Twitter share card (site/img/og-card.jpg), and support/sponsor links.
• Reuses the existing assets/ (demo mp4/gif, architecture diagram). New images are small (about 200 KB total). There are no JS dependencies.
• Responsive at phone width and respects prefers-reduced-motion.

Page content is taken from README.md, SECURITY.md and docs/ARCHITECTURE.md.

To publish after merge: go to Settings → Pages → Build and deployment, set Source to "Deploy from a branch", then choose Branch main and folder / (root) and save. The site will be at https://suriya4code.github.io/PangoLock/.

Type of change

• Bug fix
• New feature
• Refactor / chore
• Docs

How was this tested?

The site was served locally with python3 -m http.server and rendered in headless Chromium at 1440×900 and 390×844. There were no console errors and no horizontal overflow, and the reveal, counter, pipeline and lock-toggle animations were checked. No Swift code changed, so the app build is unaffected.

• xcodebuild test passes (build + unit tests green), left to CI since no app code changed
• Added/updated tests for the change: not applicable
• Manual steps that can't be tested headlessly are listed below

Manual check after merge: open the Pages URL on a real Mac or phone and confirm the demo video autoplays.

Security checklist

• No plaintext secrets written to disk or logs
• No paywall / StoreKit / feature‑gating introduced
• Destructive operations keep a confirmation/guardrail (not applicable)
• SECURITY.md / docs/ARCHITECTURE.md updated if the threat model changed (unchanged)
• CHANGELOG.md updated under Unreleased

---

Generated by Claude Code