Certificate

# ===== Award criteria =====
# Pass: >= 70%; Distinction >= 85%.
#
# 1. Block theme + theme.json     (15)
# 2. Custom plugin                  (15)
# 3. Custom post type + REST API   (15)
# 4. Custom blocks                  (15)
# 5. Performance + accessibility   (10)
# 6. Hardening + backups            (10)
# 7. Hosting + deploy               (10)
# 8. Communication                  (10)

# ===== Project brief =====
# Ship a small WordPress site with:
# - A custom BLOCK THEME (not classic PHP)
# - theme.json defining colours, fonts, spacing, layout
# - A plugin that registers a custom post type + meta fields
# - 2+ custom blocks (one display, one interactive)
# - REST API endpoint exposing your CPT
# - Hosted on a real domain (or staging URL)
# - HTTPS + caching + backups configured
# - README explaining architecture decisions

# Ideas: portfolio site, recipe library, event calendar, knowledge base,
# small e-commerce with WooCommerce.

# ===== Sample structure =====
# my-site/
#   wp-content/
#     themes/
#       mytheme/
#         style.css + theme.json
#         templates/ (index.html, single.html, ...)
#         parts/ (header.html, footer.html)
#     plugins/
#       portfolio/
#         portfolio.php (header + bootstrap)
#         includes/cpt.php
#         includes/rest.php
#         blocks/featured-work/ (custom block)
#     mu-plugins/
#       hardening.php (security tweaks)
#   docs/
#     ARCHITECTURE.md
#     RUNBOOK.md

# ===== Marking sheet (example) =====
# 1. Block theme           14/15  theme.json drives palette + fonts + spacing
# 2. Plugin                13/15  proper header, activation hook, namespace
# 3. CPT + REST            14/15  show_in_rest, custom endpoint with permissions
# 4. Custom blocks         13/15  one display + one interactive with state
# 5. Performance + a11y     9/10  Lighthouse > 90, WCAG 2.1 AA pass
# 6. Hardening              9/10  2FA, limit login attempts, WAF, hardened headers
# 7. Hosting                9/10  HTTPS, daily backups, staging
# 8. Communication          9/10  README, deployment runbook
# Total: 90/100 -> Distinction

# ===== Patterns to internalise =====
# - Block theme as the modern default
# - theme.json as the single source of design truth
# - Custom plugin for CPTs + behaviour; never edit core / themes for logic
# - WP-CLI for repeatable ops
# - Backups + staging environment ALWAYS

# ===== Pitfalls =====
# - Editing core or theme files directly
# - Plugin sprawl impacting performance + security
# - Default 'admin' credentials shipped to production
# - No tested backup restore process

// /certificate/wordpress