diff --git a/content/en/blog/2026-05-21-cozystack-1-4-new-dashboard-persistent-workers-backup-strategies-gpu-sharing/index.md b/content/en/blog/2026-05-21-cozystack-1-4-new-dashboard-persistent-workers-backup-strategies-gpu-sharing/index.md
index f32df5a5..0c44b699 100644
--- a/content/en/blog/2026-05-21-cozystack-1-4-new-dashboard-persistent-workers-backup-strategies-gpu-sharing/index.md
+++ b/content/en/blog/2026-05-21-cozystack-1-4-new-dashboard-persistent-workers-backup-strategies-gpu-sharing/index.md
@@ -7,10 +7,9 @@ description: "Cozystack v1.4.0 brings a schema-driven dashboard, persistent work
 images:
   - "cozystack-1-4-banner.jpg"
 article_types:
-  - announcement
+  - release
 topics:
   - platform
-  - release
 ---
 
 {{< figure src="cozystack-1-4-banner.jpg" alt="Cozystack v1.4.0 release banner" width="720" >}}
diff --git a/content/en/blog/2026-06-28-cozystack-1-5-gateway-api-default-backups-flux-sharding-tls-gpu-passthrough/index.md b/content/en/blog/2026-06-28-cozystack-1-5-gateway-api-default-backups-flux-sharding-tls-gpu-passthrough/index.md
index 2b991478..d1b42597 100644
--- a/content/en/blog/2026-06-28-cozystack-1-5-gateway-api-default-backups-flux-sharding-tls-gpu-passthrough/index.md
+++ b/content/en/blog/2026-06-28-cozystack-1-5-gateway-api-default-backups-flux-sharding-tls-gpu-passthrough/index.md
@@ -7,10 +7,9 @@ description: "Cozystack v1.5.0 adds opt-in Gateway API ingress via Cilium, TLS f
 images:
   - "cozystack-1-5-banner.jpg"
 article_types:
-  - announcement
+  - release
 topics:
   - platform
-  - release
 ---
 
 {{< figure src="cozystack-1-5-banner.jpg" alt="Cozystack v1.5.0 release banner — Gateway API, default backups, Flux sharding, TLS, and GPU passthrough" width="720" >}}
diff --git a/content/en/blog/2026-07-14-cve-2026-43499-ghostlock-cozystack-exposure-assessment/index.md b/content/en/blog/2026-07-14-cve-2026-43499-ghostlock-cozystack-exposure-assessment/index.md
index cc8d412e..79a290d2 100644
--- a/content/en/blog/2026-07-14-cve-2026-43499-ghostlock-cozystack-exposure-assessment/index.md
+++ b/content/en/blog/2026-07-14-cve-2026-43499-ghostlock-cozystack-exposure-assessment/index.md
@@ -8,7 +8,6 @@ images:
   - "ghostlock-cozystack-assessment.png"
 article_types:
   - news
-  - talos
 topics:
   - security
   - talos
diff --git a/content/en/blog/2026-07-14-fixing-cve-2026-53359-januscape-talos-linux/index.md b/content/en/blog/2026-07-14-fixing-cve-2026-53359-januscape-talos-linux/index.md
index b869d9a9..aa682ea5 100644
--- a/content/en/blog/2026-07-14-fixing-cve-2026-53359-januscape-talos-linux/index.md
+++ b/content/en/blog/2026-07-14-fixing-cve-2026-53359-januscape-talos-linux/index.md
@@ -8,7 +8,6 @@ images:
   - "januscape-talos-fix.png"
 article_types:
   - how-to
-  - talos
 topics:
   - security
   - talos
diff --git a/content/en/blog/2026-07-14-network-isolation-between-tenants-cilium-ebpf-kube-ovn-vpc/index.md b/content/en/blog/2026-07-14-network-isolation-between-tenants-cilium-ebpf-kube-ovn-vpc/index.md
index 1093018f..40b36941 100644
--- a/content/en/blog/2026-07-14-network-isolation-between-tenants-cilium-ebpf-kube-ovn-vpc/index.md
+++ b/content/en/blog/2026-07-14-network-isolation-between-tenants-cilium-ebpf-kube-ovn-vpc/index.md
@@ -8,7 +8,6 @@ images:
   - "tenant-network-isolation.png"
 article_types:
   - tech-article
-  - networking
 topics:
   - networking
   - security
diff --git a/content/en/blog/2026-07-17-using-cozystack-independently/index.md b/content/en/blog/2026-07-17-using-cozystack-independently/index.md
index 02139f1d..c01c8537 100644
--- a/content/en/blog/2026-07-17-using-cozystack-independently/index.md
+++ b/content/en/blog/2026-07-17-using-cozystack-independently/index.md
@@ -8,7 +8,6 @@ images:
   - "using-cozystack-independently.png"
 article_types:
   - news
-  - community
   - announcement
 topics:
   - community
diff --git a/content/en/blog/2026-07-22-linstor-drbd-replicated-storage/index.md b/content/en/blog/2026-07-22-linstor-drbd-replicated-storage/index.md
index 0b5b8a44..6b6aaebb 100644
--- a/content/en/blog/2026-07-22-linstor-drbd-replicated-storage/index.md
+++ b/content/en/blog/2026-07-22-linstor-drbd-replicated-storage/index.md
@@ -8,7 +8,6 @@ images:
   - "linstor-drbd-replicated-storage.png"
 article_types:
   - tech-article
-  - storage
 topics:
   - storage
   - linstor
diff --git a/data/taxonomy.yaml b/data/taxonomy.yaml
new file mode 100644
index 00000000..ef521655
--- /dev/null
+++ b/data/taxonomy.yaml
@@ -0,0 +1,44 @@
+# Closed vocabularies for the two blog taxonomy axes.
+#
+# The axes are orthogonal and must stay disjoint: no term may appear in both.
+#   article_types — what kind of material this is (the genre)
+#   topics        — what the material is about (the subject area)
+#
+# A post normally carries exactly one article_type and one or more topics.
+#
+# Adding a term is a deliberate act: a one-off term creates a taxonomy page
+# with a single entry, which is thin content for search engines. Prefer an
+# existing term, and add a new one only when a subject genuinely recurs.
+#
+# This file is the source of truth for the publishing validator. Keep both
+# lists alphabetical.
+
+article_types:
+  - announcement
+  - case
+  - how-to
+  - news
+  - release
+  - tech-article
+
+topics:
+  - backup
+  - cilium
+  - cncf
+  - community
+  - drbd
+  - events
+  - gpu
+  - install
+  - kubernetes
+  - kubevirt
+  - linstor
+  - networking
+  - observability
+  - opensearch
+  - platform
+  - postgresql
+  - security
+  - storage
+  - talos
+  - virtualization