Well-made web software, from interface to API.

Selected work

Public work comes with code and tests. Private work is described without internal details.

Case study ·

• coursework
• verified

GYMWARRIOR — PHP and MySQL store

2026 hardening: prepared statements, CSRF, upload validation, transactional checkout, environment-based config and fictional data. End-to-end tests that fail on the original and pass on the fix.

My role

Original build at school; hardening, tests and documentation in 2026 with AI assistance.

Stack

PHP · MySQL · JavaScript · Bootstrap · Playwright

Status

13 of 13 end-to-end tests pass (10 failed on the original)

Read the case study →Code →

More projects

1. 01

   Professional portfolio

   This site: bilingual, static and tested on every change.

   Details

   Problem

   Showing real work without exposing private systems or company data.

   Solution

   Astro with typed content, a test that blocks confidential terms, end-to-end tests at three widths and continuous deployment to GitHub Pages.

   My role

   Design, content and review; code written with AI agents.

   Status

   Live

   • Lighthouse 100 for accessibility and SEO
   • Mobile performance 99–100 (median of 3)
   publicAstro · TypeScript · Vitest
   Code →
2. 02

   EcomOS

   My own system to run a dropshipping store: catalog, supplier, pricing, ads and a control panel.

   Details

   Problem

   Automate an e-commerce operation without letting automation publish, spend or delete anything unapproved.

   Solution

   Shopify, Meta, Zendrop and TikTok integrations behind write gates (dry run, approval, backup, readback); MCP servers with a tool allowlist; versioned releases with rollback.

   My role

   Architecture, acceptance criteria and review. The code was written by AI agents (Claude Code and Codex) under my direction.

   Status

   Deployed on my own Linux VPS

   • 117 commits between July and September 2026
   • About 3,900 automated Python tests, plus Node tests
   • 27 systemd units and release/rollback scripts
   privatePython · FastAPI · Node.js
   Private repository
3. 03

   QCE — market data engine

   Python system that ingests real-time crypto market data, stores and validates it, and requires human approval before any operation.

   Details

   Problem

   Test whether an idea works without fooling yourself with the data, and make sure no automated process can act unchecked.

   Solution

   REST and WebSocket ingestion, Parquet and DuckDB storage, an exact decimal ledger, strict research/production separation, systemd-managed services and a human approval gate.

   My role

   Architecture, risk rules and validation criteria. Code written mostly by AI agents under my direction and review.

   Status

   In active development (Sep–Oct 2026)

   • 408 commits in one month
   • About 4,000 Python tests plus 82 frontend tests (Vitest)
   • Type checking with mypy and static analysis with ruff
   privatePython · WebSockets · REST
   Private repository
4. 04

   Shopify Feed Doctor

   Web tool that maps a supplier CSV to Shopify’s import format.

   Details

   Problem

   Mapping columns automatically is easy; knowing when the mapping is wrong is the hard part.

   Solution

   A scoring engine plus a “falsification” layer that can only lower a mapping’s confidence, never raise it. Tested against blind data packs.

   My role

   Designed the validation method and directed development, partly AI-assisted.

   Status

   v1.0.1 tagged

   • 44 commits, tags v1.0.0 and v1.0.1
   • About 150 Vitest test cases
   • No backend: everything runs in the browser
   privateTypeScript · Vite · Vitest
   Private repository
5. 05

   TikTok video pipeline

   Vertical rendering with ffmpeg, clients for TikTok’s official APIs, and a human gate before publishing.

   Details

   Problem

   Produce short video at scale without publishing anything lacking rights or human review.

   Solution

   1080×1920 rendering, rights checks, a mock publisher by default, and Content Posting and Shop API clients with request signing.

   My role

   Design and direction; code written with AI agents.

   Status

   No real posts yet: waiting on TikTok API approval

   • About 780 automated tests
   • Versioned deploys with sha256 and rollback
   privatePython · ffmpeg · Pillow
   Private repository
6. 06

   LEVEL 10 — web game

   Runner game with an engine-agnostic core and adapters for web and Cocos Creator.

   Details

   Problem

   Write the game logic once and be able to ship it to different platforms.

   Solution

   TypeScript monorepo with the core separated from presentation, and GitHub Actions CI on Ubuntu and Windows with Node 20 and 24.

   My role

   Design and direction; code written with AI agents.

   Status

   Not published to stores

   • 86 tests, 84 pass outside the repo (2 need git)
   • CI on a 2 OS × 2 Node version matrix
   privateTypeScript · Node.js · GitHub Actions
   Private repository
7. 07

   Spotify Android client

   Kotlin and Jetpack Compose app consuming 28 Spotify Web API endpoints, with OAuth and playback.

   Details

   Problem

   Browsing a user’s catalog and library with an expiring token, without exposing credentials.

   Solution

   Retrofit services, Hilt injection, token refresh and credentials kept out of the code (local.properties).

   My role

   Own coursework project; hardened in 2026.

   Status

   Public code with instructions

   publicKotlin · Jetpack Compose · Retrofit
   Code →
8. 08

   2D racing simulator

   Python game with tracks generated from images and mask-based collisions.

   Details

   Problem

   Detecting precisely when a car leaves an irregularly shaped track.

   Solution

   Pixel masks for collisions and distance sensors for the car.

   My role

   Own coursework project.

   Status

   Public code with instructions

   publicPython · pygame · NumPy
   Code →