Portfolio · LinkedIn · Open-source contributions · Engineering evidence · All repositories

I build full-stack products with a backend-first focus: domain APIs, relational data, authentication and authorization, background jobs, third-party integrations, and the interfaces that connect them. My strongest work goes beyond CRUD screens into connected business workflows, tenant boundaries, and reliable state transitions.

Multi-tenant SaaS · Python APIs · PostgreSQL · Background workers · Realtime systems

An end-to-end agency workflow connecting CRM and deals with proposals, project delivery, team time, invoicing, reporting, and a client portal.

• Proposal acceptance links sales state to project delivery.
• Organization context, PostgreSQL row-level security, audit records, explicit state transitions, and atomic billing operations.
• Background jobs, notifications, webhooks, timesheets, invoice generation, and client access.

Stack: FastAPI · PostgreSQL / RLS · SQLAlchemy · React · TypeScript

Frontend · Backend

A workflow platform for HVAC, plumbing, and related trades, connecting customer equipment and service locations to agreements, renewals, maintenance, work orders, billing, and reporting.

• Agreement management, maintenance schedules, work orders, equipment records, and customer imports.
• Recurring invoices, invoice PDFs, payment/refund/credit flows, exports, and billing events.
• Separate maintenance, billing, notification, SMS, and webhook workers; company-scoped records and cookie-based browser sessions.

Stack: FastAPI · PostgreSQL · SQLAlchemy · Alembic · React · Vite · Docker

Frontend · Backend · Product walkthrough

A multi-tenant workspace for private product catalogs, competitors, collection sources, offering matches, price observations, discovery jobs, and change alerts.

• Scheduled collection with atomic job claims, leases, and fencing tokens.
• Price observations, snapshots, job history, and tenant-scoped alerts.
• URL validation, public-address checks, redirects, HTTP collection, and browser-based discovery.

Stack: FastAPI · async SQLAlchemy · PostgreSQL · Redis · Celery · HTTPX · Playwright · React

Frontend · Backend

A platform combining synthetic signals and a repository-provided host agent through one telemetry pipeline.

• Bounded ingestion, host-scoped keys, sequence deduplication, anomaly detection, and sustained alert rules.
• Incident correlation, SLO/error-budget evaluation, audit history, signed notifications, and delivery replay.
• Authenticated WebSockets and a realtime processing path separated from database writes.

Stack: FastAPI · PostgreSQL · SQLAlchemy · WebSockets · psutil · React · TypeScript

Frontend · Backend

A media-processing platform that moves video, audio, and image work out of HTTP requests and into background jobs.

• Direct and resumable chunked uploads with processing status and progress tracking.
• FFmpeg probe/transcode, clip, trim, split, merge, watermark, and overlay operations.
• Upload size/type/signature checks; PostgreSQL metadata and Redis/ARQ job coordination.

Stack: FastAPI · PostgreSQL · Redis / ARQ · FFmpeg · Next.js · TypeScript

Frontend · Backend

A support platform combining organization knowledge, document ingestion, retrieval-augmented generation, cited answers, conversations, and ticket workflows, with a local Ollama model runtime.

• Background extraction, chunking, embeddings, hybrid search, and reranking.
• Cited responses, low-confidence handling, and explicit treatment of retrieved documents as untrusted reference data.
• Organization-scoped conversations, knowledge documents, customers, and tickets.

Stack: FastAPI · PostgreSQL / pgvector · Ollama · Procrastinate · Next.js

Frontend · Backend

The featured write-ups above go deeper on selected systems. This index brings the other major products together and keeps quick links to the repositories and available product walkthroughs.

My Contributions Shipped in Official Releases:

These release pages provide public evidence that the contributions reached published software, in addition to the individual merged pull requests listed below.

Merged contributions to established projects:

• laya-guard #101 — Allow safe project-relative chmod commands — added a narrowly scoped safe-command allowlist for chmod +x, chmod u+x, and chmod a+x on eligible relative project paths, while rejecting recursive operations, unsafe paths, .git/ targets, numeric modes, and glob-based bypasses; added regression coverage and updated the rule-verdict snapshot (Python · Security policy · YAML · Pytest · Open source). Fixes #94; merged on November 3, 2026.
• Ansible community.postgresql #967 — Handle PostgreSQL prerelease versions in postgresql_ping — added a fallback to current_setting('server_version_num') for PostgreSQL beta and release-candidate versions, while preserving existing release-version parsing and output; added regression coverage for PostgreSQL 19 beta/RC and regular release versions (Python · PostgreSQL · Ansible · Testing). Merged after maintainer approval.
• memtomem #2998 — Explain how to add tags when the tag list is empty — improved the CLI empty-state message with a concrete mm add "..." --tags a,b example and added regression assertions for the hint (Python · CLI · Developer experience · Testing). Merged after maintainer review.
• memtomem #2997 — Add IPv6 coverage for CSRF host helpers — added parameterized regression tests for bracketed IPv6 hosts, port stripping, malformed values, and Origin parsing in the CSRF helpers (Python · IPv6 · CSRF · Testing). Approved by the maintainer with CI reported green.
• rk-deploy #6 — Add a controller-side dry-run deploy preview — added rkdeploy deploy --dry-run to preview each selected board's package, resolved install root, and fully rendered systemd unit on the controller, with tests verifying that fleet execution, SSH commands, and SCP uploads are not invoked (Python · CLI · Deployment tooling · Testing). The maintainer verified the implementation and confirmed all 15 tests passed.
• ci-agent-audit #31 — Add Amp CLI signature — added a signature covering the amp CLI, its package identifiers and execute-mode flags, and the Amp Code Review GitHub Actions container (Developer tooling · YAML · CI/CD). Merged and shipped in ci-agent-audit v0.1.4, whose release notes credit @faizansaiyed123 for the Amp contribution.
• Home Assistant Frontend #54468 — Fix light color temperature gradient in RTL — RTL-aware light color temperature gradient in the Lovelace light color-temperature card feature (Web frontend · TypeScript · CSS).
• Sentry JavaScript #25488 — Cloudflare Workers KV instrumentation — added tracing for Workers KV get, getWithMetadata, put, delete, and list; merged and included in Sentry JavaScript SDK v11.10.0.
• TrustFlow SDK #586 — Export isWalletRejection — public wallet entry-point export with regression coverage.
• Sentry JavaScript #25357 — Export the LoaderSentry type — TypeScript type for the CDN loader interface.
• Sentry Python #7825 — Move active-thread tracking into Starlette — centralizes sync-handler thread tracking.
• Awesome Claude Agents #12 — Modernize React Component Architect agent for React 19/Next.js 14 — Reworked the React Component Architect agent definition to emphasize React 19, the Next.js App Router, Server Components, and current UI patterns (Developer tooling · Markdown · React/Next.js guidance).

I prefer implementation evidence over arbitrary performance numbers, user counts, or decorative statistics. The engineering evidence guide maps major profile claims to the code that implements them.

Backend Developer · Python APIs · Full-Stack Systems