Andile. andile.net · AWS build plan & live simulator · 07 Jul 2026
Build plan & working preview

The AWS build — and the site you can already walk through.

Andile approved the Astro + AWS rebuild: a static site served from S3 + CloudFront, edited by Claude over MCP, and discoverable by AI agents. The front end is built and live on a preview host right now — the plan below turns that preview into production.

Why this preview is faithful to AWS. Astro emits one host-agnostic dist/. Cloudflare Pages serves that exact artifact today; AWS S3 + CloudFront will serve the identical bytes in production. What you click below is what the AWS site will look and behave like — same HTML, same CSS, same content feed.

The live simulator

Walk the actual pages, not a mockup

Every page below is the real, deployed build. Open any of them — this is the experience AWS will host.

Tactical look & feel

The design system, made tangible

Editorial, not corporate-generic. A near-black forest ground, a paper reading surface, and a single electric-lime accent used once per view — for the one thing you should click. Reproduced here from the site's own v4 tokens.

Palette

Ink
#0D1F0D
Primary text, dark surfaces, nav
Forest
#1B5E20
Headers, secondary surfaces
Pine
#2E7D32
FinMio, tertiary accent
Lime
#BFFF00
Action accent — one per view
Paper
#F7F9F4
Default reading surface
Border
#E0E8D8
Hairlines on paper

Typography

Display · FrauncesPossibility. Delivered.
Body · InterAndile delivers certainty in environments where failure is not an option — implementing, managing and evolving the trading, treasury and risk infrastructure that markets run on.
Utility · IBM Plex Mono18+ YEARS · 35+ BANKS · 16 COUNTRIES · 5 LOCATIONS

Components, live from tokens

Home hero — ink surface
Specialist Capital Markets Technology
Possibility. Delivered.
We see what's coming.We build what matters.Work with us differently.
Proof bar — load-bearing stats
18+
Years in capital markets technology
35+
Banks & institutions served
16
Countries with active work
17+
Yr average client retention
Three pillars — the navigation spine (paper surface)
01See What's ComingForesight for the next era of capital markets — proven article by article.Thinking
02Build What MattersPlatform, managed and specialist delivery — with FinMio and governed AI advisory.What We Do
03Work With Us DifferentlyEmbedded partnership and AI-augmented delivery — speed you can defend to a regulator.How We Work

From the ReBrand Summary

What the rebrand changes on the site

Three content moves, decided this week. Each is content-as-code — a typed field or file — so it ships without touching components, and feeds straight to the agent discovery surface.

Positioning

A second, sharper line

Keep the descriptor; add "Independent Capital Markets Infrastructure Orchestrator" as a supporting statement — surfaced on the hero and fed to agents.

Now: Specialist Capital Markets Technology  →  + the Orchestrator line
Why Andile

Four brand pillars

Trusted Partnerships · Capital Markets Authority · Operational Resilience · People & Growth — added as a messaging section on Our Story. The three nav pillars still drive the IA.

Nav pillars stay: distinct role from the brand pillars
Proof

17+ year retention

The most defensible number in the deck, currently unused. Recommended into the proof bar (swapping "5 locations", which already lives on Our Story).

Held for sign-off: content-team call

Held steady by decision: three service lines (not four — FinMio stays a product, AI advisory a capability), and the tagline stays a single swappable field pending ExCo.

The AWS build

One artifact, one account, two ways in

The same dist/ becomes the production site; the dynamic edges — forms, consent, and MCP — run as Lambda behind API Gateway, all inside the Andile AWS account. Humans edit by talking to Claude; agents read a public discovery surface.

Source · this repo
Content-as-code
Typed data + Markdown in git. Every change is a reviewable diff.
GitHub · imbilawork/andile-net
Claude — MCP editing
Marketers edit by chatting. Writes open a pull request; nothing publishes without a merge.
OAuth 2.1 connector
release
Pipeline · CI
Tagged release
GitHub Actions builds the static site and assumes a role into AWS via OIDC — no static keys.
astro build → dist/
Preview build
Each PR builds a preview before review, so edits are seen before they're live.
deploy-prod.yml
OIDC
AWS · Andile account
Static site
dist/ synced to a private bucket; CloudFront serves andile.net over TLS, with WordPress 301s.
S3 (private) + CloudFront (OAC)
Dynamic edge
Forms → HubSpot (keys server-side) and POPIA consent, written to a ledger.
API Gateway + Lambda → DynamoDB
MCP surfaces
Public discovery for agents (read + search); OAuth editing for marketers. Served at mcp.andile.net.
API Gateway + Lambda → DynamoDB · GitHub
Lime = where a human or agent connects Neutral = automated infrastructure Dashed = Andile-owned AWS boundary

Delivery

Six phases, sequenced so the repo runs ahead of AWS

The content and code can be finished now; only provisioning waits on the Andile AWS team. Nothing here deploys to Cloudflare production — Pages stays the preview host until AWS reaches parity, then we cut over.

1

Content & brand alignment

Secondary positioning line, four brand pillars as "Why Andile", the retention stat — all host-agnostic and fed to the agent surface.

RepoLow risk
2

AWS static hosting

S3 (private) + CloudFront (OAC), ACM cert, DNS. CI is already written; it needs the deploy role, bucket and distribution IDs.

AWS teamLow risk
3

Dynamic edge — forms & consent

API Gateway + Lambda running the same portable core as dev; POPIA consent written to DynamoDB.

Repo + AWSLow risk
4

MCP on AWS — the AI-first CMS

Public discovery (read + search) and OAuth editing (edit → PR → publish), served at mcp.andile.net. The editing side is the long pole — see below.

Repo + AWSMed–high
5

WordPress cutover

Generate 301s from the live WP URLs, swap placeholder copy for approved content, then flip DNS to CloudFront.

Repo + AWSMed risk
6

Cleanup

Retire the interim Cloudflare MCP connector and the superseded legacy MCP path once AWS is proven in production.

RepoLow risk
The long pole · decide early

OAuth for the editing connector, on AWS

Claude's MCP connector expects dynamic client registration + PKCE. On Cloudflare that's a library we get for free; AWS has no drop-in equivalent, so this is the one genuine engineering fork.

Port a minimal OAuth provider Recommended

A small Lambda + three DynamoDB tables mirror the Cloudflare provider — full dynamic-registration + PKCE control, MCP-idiomatic. Layer Google-Workspace/Cognito SSO as the editor login behind the consent screen.

Amazon Cognito as the server

Native SSO and MFA, less code — but no dynamic client registration, so the Claude client must be statically pre-registered. Simpler infra, less standard for MCP clients.

Locked this week

Four decisions the build now rests on

Positioning
Orchestrator as a second line

Keep the descriptor; add the Orchestrator line as support — not a re-lead.

Services
Three lines, held

FinMio stays a product, AI advisory a capability. No fourth service.

Pillars
Both, distinct roles

Nav-verb pillars drive IA; the four brand pillars are a messaging layer.

Prod MCP
Migrate to AWS

Discovery + OAuth editing move into the Andile AWS account. CF is interim.

Live today

  • Astro site built & deployed — 15 pages on andile-net.pages.dev
  • Agent discovery MCP live at mcp.2nth.ai/discovery — serving current content
  • OAuth editing MCP built — edit → PR → publish
  • Machine-readable feed at /content-index.json
  • Green build: 0 type errors, brand-language lint passing

Pending the AWS team

  • OIDC deploy role + S3 bucket & CloudFront distribution IDs
  • Terraform / CDK for S3, CloudFront, API Gateway, Lambda, DynamoDB
  • OAuth store decision (Option A vs Cognito) for the editing connector
  • Live WordPress URL list to generate the 301 redirect map
  • Content-team sign-off on approved copy + the retention stat