📰 archetype: cms

Publish content without losing 30% of organic traffic.

Building with Sanity, Contentful, Strapi, Payload, Ghost, Gatsby, or Eleventy? GreatCTO auto-detects the cms archetype and ships schema.org structured data, Core Web Vitals (LCP / INP / CLS), DMCA workflow, UGC moderation (CSAM + NCMEC), image pipeline (AVIF / WebP / responsive), SEO hygiene, and WCAG 2.2 AA gates from day one.

$ npx great-cto init Back to home ↗

What you avoid

The 5 CMS bugs that tank rankings + invite lawsuits.

Without GreatCTO

☐No schema.org JSON-LD — Google rich snippets miss · 30% organic loss
☐LCP > 4s on article template — Core Web Vitals fail · ranking drop
☐No CSAM detection on image upload — federal liability (18 USC § 2258A)
☐DMCA agent unregistered — §512 safe harbor void · publisher liability
☐WCAG 2.2 fails on form / video — ADA Title III lawsuit
☐Traffic crash · DOJ letter · DMCA storm.

With GreatCTO

✓cms-reviewer enforces JSON-LD per content type · validated in CI
✓Lighthouse CI gate: LCP < 2.5s / INP < 200ms / CLS < 0.1
✓PhotoDNA on every image · NCMEC CyberTipline reporting flow
✓DMCA agent registered · notice-and-action · repeat-infringer policy
✓axe-core in CI · captions for video · alt-text linter on schema
✓Top SEO discipline · safe-harbored · accessible · audit-clean.

Auto-applied gates

Detected: `@sanity/client` / `contentful` / `@payloadcms/payload` →
cms archetype.

Compliance auto-suggested: dmca · wcag-2.2-aa · gdpr · dsa-eu. Specialist agents activated:

01 · cms-reviewer

SEO + DMCA + UGC + a11y

Schema.org coverage per content type · Core Web Vitals budget · DMCA registered agent + notice-and-action · UGC moderation (CSAM hash + NCMEC + spam + hate-speech) · image / video pipeline · SEO hygiene · WCAG 2.2 AA · EU DSA Article 16.

02 · performance-engineer

CWV + capacity

LCP / INP / CLS budgets · CDN cache rules · image format negotiation · responsive srcset · lazy-loading · CrUX dashboard · RUM on top routes.

03 · security-officer

UGC abuse + auth

Upload validation · EXIF strip · spam classifier · hate-speech detection · banned-user enforcement (IP + email + device fingerprint) · session security.

04 · data-platform-reviewer

Analytics PII

Comment / review PII classification · GDPR consent · cookie banner · analytics SDK opt-in · cross-border for EU readers.

Domain pack overlays

Likely to overlay on cms.

Packs auto-attach when CLI detects pack-specific signals (e.g. twilio in deps → voice-pack). Each pack adds its own reviewer agents + human gates on top of the base archetype pipeline.

+ API Platform

OAuth 2.1, webhook signing, idempotency, RFC 8594 Sunset