Full-stack & platform engineer.
AI-integrated production systems, the infrastructure under them, and the guardrails that keep them honest.
I take systems from schema to production and stay with them after launch. Most of this year went into two AI platforms under NDA — one live, one built end to end — so the work is described here by what it does, not by whose logo is on it. The engineering is written up in full →
Row-level security on every tenant-scoped table, append-only audit, capability grants instead of guessable URLs, and residency gates that survive a change of cloud. The work that decides whether a platform can safely hold someone else's customers.
Agent graphs, retrieval across vector and graph stores, real-time voice, and human approval gates on anything the model isn't allowed to get wrong. Metered per tenant, evaluated against rubrics rather than a vibe check.
Containers, infrastructure as code, and CI that gates a merge on typecheck, lint, tests, secret scanning and static analysis. I own the path from a commit to a running service, including the unglamorous half of a launch.
Data-dense operator consoles, bilingual English/Arabic with genuine right-to-left, installable PWAs, motion and 3D. Built to stay readable for whoever picks it up after me.
Two of these are under NDA and appear without their client, product name or market. Everything else links to something you can open.
Reads a client's analytics and commerce accounts, proposes campaigns against what it finds, and manages them on connected ad accounts — behind two human approval gates, because nothing automated gets to spend a client's money on its own.
Conducts real voice interviews in Arabic and English and returns evidence-cited assessments. Row-level security on every table, append-only audit, full right-to-left, and a right of reply for anyone assessed. Built end to end; not yet deployed, and it says so.
My own studio's site, hand-written rather than assembled: no framework, no template, no page builder. Brand, copy, motion and build are all mine.
Storefront, staff back-office and the plumbing between them. Per-tab permissions in a signed token, Redis in front of a hot menu, web push to a phone on the counter, and checkout that hands off to WhatsApp because that is how this market pays.
A seafood restaurant in Tripoli, shipped in two days: menu, an admin dashboard the owner runs themselves, and ordering that hands off to WhatsApp because that is where the customers already are.
2,042 commits authored across seven production repositories, April–September 2026. The architecture, access models and infrastructure behind all of it are written up in the engineering notes — or see GitHub.
Remote, EMEA-friendly hours. I take on the systems where being wrong has a cost — money moving, personal data, a decision about a person — and I stay with them after launch. If that is what you are building, let's talk.
Occasional write-ups on production engineering — architecture decisions, trade-offs, and what broke. No spam.
Need a developer for your project?
Hire me at WebRift →