I’m currently building and testing a new architectural framework where business logic runs on the client side.
The core idea is to run TypeScript inside a WASM VM, while minimizing the exposed JavaScript APIs. Backend business logic is encrypted and executed inside WASM, making the attack surface much smaller.
Security is the biggest concern, so this framework is designed to apply as many security layers as possible and dramatically increase the amount of time and effort required to hack it.
It includes E2E encryption by default, tenant policies, an SQL registry, and many other security policies. The framework only becomes truly safe when these policies are properly applied, but the major advantage is that it can be operated at almost zero cost.
Another key benefit is that both the frontend and backend can be deployed together, and when used with Cloudflare, one-click rollback is possible.
The biggest advantage is that you no longer need to worry about infrastructure. It allows MVP projects to be built, deployed, and operated as quickly as possible, with almost no operational cost.
The project is called *dokkebi-cli*.