Portfolio · Resume · LinkedIn · Open-source contributions · Engineering evidence · All repositories

I build full-stack products with a backend-first focus: domain APIs, relational data, authentication and authorization, background jobs, third-party integrations, and the interfaces that connect them. My strongest work goes beyond CRUD screens into connected business workflows, tenant boundaries, and reliable state transitions.

Multi-tenant SaaS · Python APIs · PostgreSQL · Background workers · Realtime systems

Gyansetu AI · Product website

Contributed to the Gyansetu AI backend during my internship, working in the existing Python/Flask codebase, refactoring backend code, and working with PostgreSQL.

Technologies: Python · Flask · PostgreSQL

An end-to-end agency workflow connecting CRM and deals with proposals, project delivery, team time, invoicing, reporting, and a client portal.

• Proposal acceptance links sales state to project delivery.
• Organization context, PostgreSQL row-level security, audit records, explicit state transitions, and atomic billing operations.
• Background jobs, notifications, webhooks, timesheets, invoice generation, and client access.

Stack: FastAPI · PostgreSQL / RLS · SQLAlchemy · React · TypeScript

Frontend · Backend

A workflow platform for HVAC, plumbing, and related trades, connecting customer equipment and service locations to agreements, renewals, maintenance, work orders, billing, and reporting.

• Agreement management, maintenance schedules, work orders, equipment records, and customer imports.
• Recurring invoices, invoice PDFs, payment/refund/credit flows, exports, and billing events.
• Separate maintenance, billing, notification, SMS, and webhook workers; company-scoped records and cookie-based browser sessions.

Stack: FastAPI · PostgreSQL · SQLAlchemy · Alembic · React · Vite · Docker

Frontend · Backend · Product walkthrough

A multi-tenant workspace for private product catalogs, competitors, collection sources, offering matches, price observations, discovery jobs, and change alerts.

• Scheduled collection with atomic job claims, leases, and fencing tokens.
• Price observations, snapshots, job history, and tenant-scoped alerts.
• URL validation, public-address checks, redirects, HTTP collection, and browser-based discovery.

Stack: FastAPI · async SQLAlchemy · PostgreSQL · Redis · Celery · HTTPX · Playwright · React

Frontend · Backend

A platform combining synthetic signals and a repository-provided host agent through one telemetry pipeline.

• Bounded ingestion, host-scoped keys, sequence deduplication, anomaly detection, and sustained alert rules.
• Incident correlation, SLO/error-budget evaluation, audit history, signed notifications, and delivery replay.
• Authenticated WebSockets and a realtime processing path separated from database writes.

Stack: FastAPI · PostgreSQL · SQLAlchemy · WebSockets · psutil · React · TypeScript

Frontend · Backend

A media-processing platform that moves video, audio, and image work out of HTTP requests and into background jobs.

• Direct and resumable chunked uploads with processing status and progress tracking.
• FFmpeg probe/transcode, clip, trim, split, merge, watermark, and overlay operations.
• Upload size/type/signature checks; PostgreSQL metadata and Redis/ARQ job coordination.

Stack: FastAPI · PostgreSQL · Redis / ARQ · FFmpeg · Next.js · TypeScript

Frontend · Backend

A support platform combining organization knowledge, document ingestion, retrieval-augmented generation, cited answers, conversations, and ticket workflows, with a local Ollama model runtime.

• Background extraction, chunking, embeddings, hybrid search, and reranking.
• Cited responses, low-confidence handling, and explicit treatment of retrieved documents as untrusted reference data.
• Organization-scoped conversations, knowledge documents, customers, and tickets.

Stack: FastAPI · PostgreSQL / pgvector · Ollama · Procrastinate · Next.js

Frontend · Backend

The featured write-ups above go deeper on selected systems. This index brings the other major products together and keeps quick links to the repositories and available product walkthroughs.

My Contributions Shipped in Official Releases:

These release pages provide public evidence that the contributions reached published software, in addition to the individual merged pull requests listed below.

Merged contributions to established projects:

• ci-agent-audit #64 — Detect OpenHands CLI approval-bypass flags — added command-scoped detection for --always-approve, --yolo, and --headless; moved the three corresponding regression cases from known gaps to direct-risk coverage and updated the benchmark figures to 122 cases, 57 direct cases, 3 remaining gaps, and 96.9% recall (Python · Security analysis · CLI detection · YAML · Benchmarking · GitHub Actions). Merged on November 14, 2026 (UTC); all 10/10 CI checks passed, including the Python 3.10–3.13 matrix, package build, and five action self-tests.

• ci-agent-audit #62 — Add Factory Droid signature — added a YAML signature for the official Factory-AI/droid-action, droid exec, and @factory/cli; covered documented prompt inputs and flags, open actor settings, and high-autonomy/permission-bypass options (--auto high and --skip-permissions-unsafe) with narrowly scoped detection (Developer tooling · YAML · CI/CD · Security). Merged on November 14, 2026 (UTC); YAML parsing and regex smoke checks passed.

• Ansible community.postgresql #976 — Respect requested privileges when revoking default privileges — fixed postgresql_privs so state: absent with type: default_privs revokes only the requested privs on the requested objs, rather than unconditionally revoking all privileges across hard-coded object classes; preserved unrelated default ACLs and existing state: present behavior, corrected uppercase SCHEMAS handling, and added unit/integration regression coverage for selective revocation, ALL_DEFAULT, check mode, and idempotency (Python · PostgreSQL · Ansible · SQL · Integration testing · Pytest). Merged on November 11, 2026 (UTC).

• rk-deploy #8 — Add Simplified Chinese specification translation — translated the technical specification while preserving all fenced code blocks, CLI commands, filenames, paths, identifiers, configuration keys, tables, and exit-code meanings; verified 7 code blocks, 71 inline identifiers, 17 headings, and 37 table rows (Documentation · Markdown · Simplified Chinese · Technical writing). Merged on November 5, 2026 (UTC).

• rk-deploy #7 — Add fleet-aware uninstall command — implemented rkdeploy uninstall with fleet-wide inventory, last-deployment protection, safe systemd cleanup, shared-data preservation by default, symlink/path safeguards, and regression tests for failure and recovery cases (Python · CLI · Linux · Deployment tooling · Safety · Pytest). Merged on November 5, 2026 (UTC).

• ci-agent-audit #58 — Propagate GitLab before_script exports — propagated exported-variable taint from before_script into script, supported inherited top-level default.before_script, respected inherit: default: false, kept after_script isolated, and added regression coverage for tainted/static exports and default inheritance (Python · GitLab CI · Security · Pytest · CI/CD). Merged on November 4, 2026.

• ci-agent-audit #33 — Add Qwen Code signature — added signature coverage for the Qwen Code GitHub Action, qwen CLI, and @qwen-code/qwen-code package, including the prompt input, -p/--prompt flags, and YOLO-mode arguments (Developer tooling · YAML · CI/CD · Security). Merged on November 4, 2026.

• laya-guard #101 — Allow safe project-relative chmod commands — added a narrowly scoped safe-command allowlist for chmod +x, chmod u+x, and chmod a+x on eligible relative project paths, while rejecting recursive operations, unsafe paths, .git/ targets, numeric modes, and glob-based bypasses; added regression coverage and updated the rule-verdict snapshot (Python · Security policy · YAML · Pytest · Open source). Fixes #94; merged on November 3, 2026.

• Ansible community.postgresql #967 — Handle PostgreSQL prerelease versions in postgresql_ping — added a fallback to current_setting('server_version_num') for PostgreSQL beta and release-candidate versions, while preserving existing release-version parsing and output; added regression coverage for PostgreSQL 19 beta/RC and regular release versions (Python · PostgreSQL · Ansible · Testing). Merged after maintainer approval.

• memtomem #2998 — Explain how to add tags when the tag list is empty — improved the CLI empty-state message with a concrete mm add "..." --tags a,b example and added regression assertions for the hint (Python · CLI · Developer experience · Testing). Merged after maintainer review.

• memtomem #2997 — Add IPv6 coverage for CSRF host helpers — added parameterized regression tests for bracketed IPv6 hosts, port stripping, malformed values, and Origin parsing in the CSRF helpers (Python · IPv6 · CSRF · Testing). Approved by the maintainer with CI reported green.

• rk-deploy #6 — Add a controller-side dry-run deploy preview — added rkdeploy deploy --dry-run to preview each selected board's package, resolved install root, and fully rendered systemd unit on the controller, with tests verifying that fleet execution, SSH commands, and SCP uploads are not invoked (Python · CLI · Deployment tooling · Testing). The maintainer verified the implementation and confirmed all 15 tests passed.

• ci-agent-audit #31 — Add Amp CLI signature — added a signature covering the amp CLI, its package identifiers and execute-mode flags, and the Amp Code Review GitHub Actions container (Developer tooling · YAML · CI/CD). Merged and shipped in ci-agent-audit v0.1.4, whose release notes credit @faizansaiyed123 for the Amp contribution.

• Home Assistant Frontend #54468 — Fix light color temperature gradient in RTL — RTL-aware light color temperature gradient in the Lovelace light color-temperature card feature (Web frontend · TypeScript · CSS).

• Sentry JavaScript #25488 — Cloudflare Workers KV instrumentation — added tracing for Workers KV get, getWithMetadata, put, delete, and list; merged and included in Sentry JavaScript SDK v11.10.0.

• TrustFlow SDK #586 — Export isWalletRejection — public wallet entry-point export with regression coverage.

• Sentry JavaScript #25357 — Export the LoaderSentry type — TypeScript type for the CDN loader interface.

• Sentry Python #7825 — Move active-thread tracking into Starlette — centralizes sync-handler thread tracking.

• Awesome Claude Agents #12 — Modernize React Component Architect agent for React 19/Next.js 14 — Reworked the React Component Architect agent definition to emphasize React 19, the Next.js App Router, Server Components, and current UI patterns (Developer tooling · Markdown · React/Next.js guidance).

I prefer implementation evidence over arbitrary performance numbers, user counts, or decorative statistics. The engineering evidence guide maps major profile claims to the code that implements them.

Backend Developer · Python APIs · Full-Stack Systems