feat: add "Exploring Hardened Shielded Pools" blog post

src/lib/posts.ts

@@ -0,0 +1,25 @@
+import type { CollectionEntry } from 'astro:content';
+
+/*
+ * Date gating for the `posts` collection, matching Jekyll's `future: false`:
+ * a post whose `date` is in the future is hidden until the site is rebuilt at
+ * or after that moment (GH Pages rebuilds on push/merge).
+ *
+ * Shared by every consumer of getCollection('posts') so the blog index, the
+ * homepage latest-posts list, and static path generation all agree.
+ *
+ * The comparison is on the full timestamp, not just the calendar day, so a
+ * post can be scheduled to the hour. Give `date` a time and offset to pin a
+ * release (e.g. `2026-06-11T07:00:00-04:00` for 7am ET). A bare `YYYY-MM-DD`
+ * is parsed as midnight UTC, which keeps day-granular scheduling working.
+ * Note this only gates the static output: a future-dated post still appears
+ * only once a build actually runs at or after its `date`.
+ */
+export function isPublished(
+  post: CollectionEntry<'posts'>,
+  now: Date = new Date(),
+): boolean {
+  const date =
+    post.data.date instanceof Date ? post.data.date : new Date(post.data.date);
+  return date.getTime() <= now.getTime();
+}

src/pages/blog/[slug].astro

@@ -10,6 +10,7 @@ import { getCollection, render } from 'astro:content';
 import DetailPageLayout from '../../layouts/DetailPageLayout.astro';
 import ArticleFooter from '../../components/ArticleFooter.astro';
 import { jekyllSlugify } from '../../lib/jekyllSlug';
+import { isPublished } from '../../lib/posts';
 
 function toISODate(d: string | Date | undefined): string {
   if (!d) return '';
@@ -19,7 +20,7 @@ function toISODate(d: string | Date | undefined): string {
 
 export async function getStaticPaths() {
   const entries = await getCollection('posts');
-  return entries.map((entry) => ({
+  return entries.filter((entry) => isPublished(entry)).map((entry) => ({
     params: { slug: jekyllSlugify(entry.data.title) },
     props: { entry },
   }));

src/pages/blog/index.astro

@@ -12,6 +12,7 @@ import { getCollection } from 'astro:content';
 import ListPageLayout from '../../layouts/ListPageLayout.astro';
 import NextStepCTA from '../../components/NextStepCTA.astro';
 import { jekyllSlugify } from '../../lib/jekyllSlug';
+import { isPublished } from '../../lib/posts';
 
 function toISODate(d: string | Date | undefined): string {
   if (!d) return '';
@@ -21,6 +22,7 @@ function toISODate(d: string | Date | undefined): string {
 
 const all = await getCollection('posts');
 const posts = all
+  .filter((p) => isPublished(p))
   .map((p) => ({
     slug: jekyllSlugify(p.data.title),
     title: p.data.title,

src/pages/index.astro

@@ -5,6 +5,7 @@ import PipelineAnimation from '../components/PipelineAnimation.astro';
 import { getStats } from '../lib/stats';
 import { getCollection } from 'astro:content';
 import { jekyllSlugify } from '../lib/jekyllSlug';
+import { isPublished } from '../lib/posts';
 import { findFaq } from '../data/faq';
 
 const stats = await getStats();
@@ -18,7 +19,8 @@ function toISODate(d: string | Date | undefined): string {
   return String(d).slice(0, 10);
 }
 const allPosts = await getCollection('posts');
-const latestPosts = [...allPosts]
+const latestPosts = allPosts
+  .filter((p) => isPublished(p))
   .map((p) => ({
     slug: jekyllSlugify(p.data.title),
     title: p.data.title,