Full-Stack Developer

Crafting Digital Experiences

I design and build products that live at the intersection of craft and technology.

Get in Touch View Work

What I Do

Services

Web Development

High-performance web applications built with modern frameworks, optimized for speed and scalability.

UI/UX Design

Pixel-perfect interfaces that balance aesthetics with usability, creating memorable digital experiences.

Backend & APIs

Robust server architectures and RESTful APIs designed to handle millions of requests with elegance.

Mobile Apps

Cross-platform mobile applications that feel native, delivering seamless experiences on every device.

Insights & Writing

Blogs

The API Attack Surface: A Field Manual for Engineers Who've Seen Production Burn

API SecurityWeb Application SecurityGraphQL SecurityRate LimitingCORSInjectionWAFShadow APIsDevSecOpsProduction Security

The Black Box at Scale: Why Multi-Agent AI Observability Needs a Complete Overhaul

multi-agent-aiai-observabilitydistributed-tracingopentelemetryagentic-systemsllm-observabilitysystem-designbackend-engineeringreasoning-tracesai-engineering

Results

Case Studies

Lamiya2026

Lamiya Wedding Center: Production-Grade Optimistic UI with Strict Reconciliation

How Lamiya Wedding Center built a production-safe optimistic UI system using TanStack Query with snapshot-based rollback, 409 stock conflict handling, SSR-safe loading states, and a multi-stage checkout state machine that integrates directly with a PostgreSQL reservation backend.

Cart updates dropped from 200–500ms lag to sub-frame response. Rollback triggered in ~4% of mutations during flash sales, all recovered silently without user intervention.ReactTanStack QueryOptimistic UIState ManagementE-commerce FrontendNext.jsTypeScriptCart ArchitectureUX EngineeringCase Study

Aurora2026

Aurora CMS: Practical Defense-in-Depth Form Protection with Next.js and Supabase

How Aurora CMS eliminated form spam without reCAPTCHA using a five-stage defense pipeline built from server-side token generation, honeypots, origin validation, memory-safe rate limiting, and audit logging in Next.js and Supabase. Zero third-party dependencies, zero false positives after tuning.

Spam dropped to near-zero within days. Zero legitimate submissions blocked after threshold tuning. Submission latency held under 300ms with no CAPTCHA, no vendor costs, and no JavaScript requirement.SecurityNext.jsSupabasePostgreSQLSpam ProtectionCSRFRate LimitingWeb SecurityDefense-in-DepthCase Study

Lamiya2026

How Lamiya Wedding Center Eliminated Overselling in Flash Sales: A PostgreSQL Multi-Phase Reservation System with Compensating Transactions

How Samiya Wedding Center built a multi-phase inventory reservation system in PostgreSQL that eliminated overselling during flash sales using pessimistic locking, compensating transactions, and a rank-based webhook state machine, without any external infrastructure.

Checkout time dropped from ~800ms to ~120ms. Zero overselling observed since deployment. Payment webhook reconciliation went from manual to fully automated.PostgreSQLInventory ManagementE-commerce ArchitectureDatabase DesignPL/pgSQLConcurrencyBackend EngineeringCase StudyFlash Sales

About

Building with purpose.

With over 8 years of experience shipping production software, I specialize in turning complex problems into clean, scalable solutions. I care deeply about performance, accessibility, and the details that make software feel alive.

ReactTypeScriptNode.jsPostgreSQLAWSDockerGraphQLFigma

Investment