Cloud infrastructure
Everything runs serverless on Google Cloud: the admin studio, the scheduled jobs, the secrets, and the public feed. No servers to babysit.
- Cloud Run + Cloud Run Jobs The Streamlit studio as a service, with long-running ingestion and ranking jobs split out of the request path
- Cloud Build + Artifact Registry Dockerized builds published as immutable, explicitly tagged images. No deploying latest.
- Cloud Scheduler Timed triggers for recurring ingestion and materialization jobs
- Secret Manager + IAM hardening API keys out of code, least-privilege service accounts, and a public bucket that exposes objects only
- Cloud Storage Artifact archives plus the dedicated public rankings bucket