Paperbound: Local-First Proposal & E-Signature Studio

Commercial proposal and e-signature software (PandaDoc, DocuSign, Proposify) costs field contractors and boutique service studios $1,800–$3,000+ every single year. Beyond the recurring software tax, cloud-only tools fail immediately when field estimators lose cellular connectivity on remote job sites, and vendor lock-in holds customer contract history hostage.

I architected and engineered Paperbound: a sovereign, local-first proposal studio that executes all heavy compute tasks (margin negotiation, vector PDF compilation, cryptographic hashing, and data backup) directly inside the client's browser with $0/month infrastructure overhead.

Sovereign Edge Authentication (Passkeys + Master Passphrase)

To guarantee a 100% credit-card-free deployment and eliminate upstream email API quota vulnerabilities, Paperbound replaces third-party identity providers (Auth0, Clerk, Firebase) with a Dual-Door Sovereign Auth Engine:

1. Door 1: Hardware Biometric Passkeys (WebAuthn / FIDO2): 1-tap biometric unlock via Touch ID, Face ID, or Windows Hello. Public keys are registered and evaluated directly at the Cloudflare edge.
2. Door 2: Edge-Verified Master Passphrase: A salted SHA-256 master passphrase that issues an encrypted 30-day HMAC-SHA256 authenticated session token.

// Edge HMAC-SHA256 Session Verification
export const onRequestPost: PagesFunction<{ AUTH_SECRET: string }> = async (context) => {
  const { sessionToken } = await context.request.json();
  if (!sessionToken) return new Response("Unauthorized", { status: 401 });

  const isValid = await verifyHmacJwt(sessionToken, context.env.AUTH_SECRET);
  if (!isValid) return new Response("Invalid Session", { status: 401 });

  return new Response(JSON.stringify({ authenticated: true }), {
    headers: { "Content-Type": "application/json" },
  });
};

3-Layer Security Model for Remote Customer Signing

To prevent IDOR (Insecure Direct Object Reference) and automated URL parameter scraping on public contract links:

1. 128-Bit Capability Tokens: Public quote URLs utilize cryptographically random tokens generated via the Web Crypto API (/sign?token=sign_tok_8f9b...), yielding $3.4 \times 10^$ combinations.
2. Signatory Email Identity Gate: The document scope and pricing remain locked behind a challenge screen until the recipient enters an email matching the proposal's authorized signatory.
3. Wax-Seal Self-Destruction: The instant the customer draws their signature, the contract state is permanently sealed with an immutable SHA-256 audit digest.

// In-Browser SHA-256 Cryptographic Audit Digest
export async function computeContractDigest(payload: string): Promise<string> {
  const encoder = new TextEncoder();
  const data = encoder.encode(payload);
  const hashBuffer = await crypto.subtle.digest("SHA-256", data);
  const hashArray = Array.from(new Uint8Array(hashBuffer));
  return hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
}

3-Tier Storage & Client Data Sovereignty

Paperbound ensures client records are never held hostage inside a SaaS database:

• Tier 1 (Local State): Active proposals and catalog SKUs reside in high-speed local IndexedDB storage (immune to connection drops).
• Tier 2 (Transient Edge Sync): Temporary encrypted Cloudflare KV bridge for camera QR device pairing and remote signing staging.
• Tier 3 (Universal Exports): 1-click single-file database snapshot restore (.json), batch standalone vector PDF export (.zip via jszip + jspdf), and direct client-side cloud backup to Google Drive, Dropbox, OneDrive, or Box.

Business Impact & ROI Close

By deploying Paperbound as a turnkey, domain-locked client system:

• SaaS Tax Elimination: Saves a 4-person contractor team over $11,500 in subscription fees over a 5-year operating window.
• Job Site Connection-Drop Resilience: Estimators can draft quotes, adjust margins, and take on-site customer signatures in basements or remote facilities with zero cell reception.
• Total Data Sovereignty: Business owners retain 100% ownership of their proposal records and client databases.