Static-Only Onion Architecture

FantasyCrop — Technical Note 002

Most modern web systems are layered: frontend frameworks, backend logic, databases, APIs, session handling, logging infrastructure.

Each layer introduces capability. Each capability introduces complexity.


On the Tor network, complexity behaves differently. Latency is higher. Traffic analysis is more sensitive. Misconfiguration carries greater consequences.

In such an environment, dynamic architecture is not neutral. It increases state. State increases exposure.


A static-only onion service eliminates entire classes of risk:

What remains is file delivery. File delivery is predictable. Predictability reduces uncertainty.


Static architecture also alters operator behavior. There is no admin panel. No dashboard. No hidden route. No secret interface.

The public surface is the entire surface.


This constraint forces intentionality. Content must be written offline. Files must be reviewed before upload. There is no live-edit convenience.

That inconvenience reduces impulsive deployment. Reduced impulsiveness reduces operational error.


Static-only does not guarantee security. It narrows the attack model.

Security is not achieved through tools alone. It is achieved through reduced possibility.


Minimal onion architecture is not about aesthetic minimalism. It is about eliminating unnecessary moving parts.

When fewer components exist, fewer components fail.

← Back