S3 + CloudFront static hosting, Progressive Web Apps with service workers, DynamoDB single-table designs, Amazon Cognito, AWS Lambda, the CDK, S3 presigned URLs, Prawn PDF generation, Amazon SES — every one of these is a well-documented, mainstream AWS pattern. A competent cloud engineer would recognize all of it on sight. Nothing in this stack advances the boundary of what is technically possible, and it would be dishonest to claim it does.
What follows is everything that is notable — with the conventional foundation stated plainly so the real points stand on their own.
This operation runs:
Steady-state cost: pennies to low single-digit dollars a month.
The architecture refuses standing servers. Compute runs on the congregant's own phone (PWA — $0 to operate); backends scale to zero (pay-per-request Lambda + DynamoDB). This is the same thesis behind 37signals' cloud exit and LEGO's serverless migration — applied where almost nobody bothers to apply it: a solo ministry. The conventional instinct would stand up an EC2 fleet and an RDS instance and pay 100× for the identical outcome. The restraint is the achievement.
In the congregation invitation apps, guest names and phone numbers never leave the member's device — they live in on-device storage, and only anonymous per-show counts sync to the cloud. The tally function is physically scoped so it cannot read the proprietary leads table. The privacy guarantee is enforced by the shape of the data flow, not by a promise in a footer. Many far larger organizations get this exactly backwards.
The parts are individually mundane, but they interlock into one coherent organism:
outbound dialing (DialDeck) ↔ the same church-lead population ↔ per-event apps ↔ anonymous live tallies ↔ the coordinator cockpit ↔ pastor portal ↔ covenant e-signature ↔ confirmation & notification email
The significance is not any single node — it is that the whole exists and is operated by one person. This is what an enterprise would normally staff an engineering team and a sysadmin to build and run.
The forward-looking element of this system is its operating model:
The same leverage is also the fragility. This system is held together by one vision and one AI — not by a team with code review and a test suite. Rough edges keep surfacing precisely for that reason:
None of these were caught by tests. They were caught by the owner noticing or by the maintainer re-reading. The bus factor is real, and the whole model rests on the context system continuing to work. That is the price of the speed — and naming it honestly is part of taking the architecture seriously.
Shown as a case study, the bricks would not impress an architect. But the economics, the privacy-by-design, and above all the LLM-maintained operating model would teach a student something they cannot easily get anywhere else yet. The version history and the context narratives are themselves the curriculum: a real, running example of how a single operator and an AI maintainer can build and run a coherent, enterprise-shaped system — and of exactly where that approach is strong and where it is fragile.
Conventional bricks. Unusually disciplined architecture.
A genuinely novel way of building and running it.