A public AI assistant in Ian's locked voice — streaming, spend-capped, and adversarially hardened.
The AppliedIQ site doesn't just *show* AI work — it runs some. Visitors on three surfaces (home, /work, /faq) can ask about the tooling and get streamed answers in Ian's locked v0.3 voice.
The path: the chat island posts to a Cloudflare Worker, which relays to the Anthropic API with streaming and prompt caching, then pipes text-only SSE back to the browser. The browser never sees an API key; the Worker enforces rate limits and a hard spend cap.
The part that earns the showcase: the system prompt is a locked artifact carrying the voice contract and an employer firewall — held 8-for-8 against adversarial probing angles before launch. It answers about the public tools; it does not leak employer specifics, no matter how the question is framed.