ASRATEFREM

• Built Sentinel-1 plow and Sentinel-2 vigor gates that turn plot imagery into tranche release or hold decisions.
• Deployed geospatial processing to an af-south-1 Lambda so App Runner avoided timeouts and compute stayed near source data.
• Built three Anchor programs for immutable oracle data, investor controls, isolated USDC custody, and gated settlement.

›2 deterministic oracle gates (plow + crop vigor)

›3 Anchor programs · 28 GraphQL queries, 45 mutations

›169 passing checks across RPC, Rust, TypeScript, and infra

• Enforced tenant isolation in Postgres with row-level security policies keyed to a session variable set in Rack middleware, not app-level scopes.
• Built a pluggable image-generation layer with a provider registry, swapping between backends behind one Result contract.
• Added per-organization monthly generation quotas with row-locked atomic increments, so concurrent booth requests cannot oversell a plan.

›11 tables · 17 migrations · 6 under RLS isolation

›13 booth and admin screens

›30 RSpec files · 9 Vitest · 2 Playwright e2e

• Built a mountable Rails engine running the full OAuth handshake: PKCE S256, timing-safe state, and Google nonce and ID-token claim checks.
• Designed a single-use 60s exchange code so the session token never lands in a redirect URL, browser history, Referer header, or logs.
• Backed sessions with database rows instead of JWTs, making revocation a row delete — no Redis, no key rotation, no token blocklist.

›7 endpoints · 2 providers · 2 tables

›60s one-time code TTL · 20/min authorize, 10/min callback

›v0.8.0 on RubyGems · 1.8k+ downloads

Drops OAuth sign-in into a Rails API or monolith with one mount line and a generator, without adopting Devise's or Rodauth's wider conventions.

• Built five Rails 8 engines (core, banking, credit, marketplace, payment) as independently versioned gems consumed by one API host app.
• Wired a repository_dispatch CI chain so an engine release auto-bundles and commits the host app's Gemfile.lock, removing manual version bumps.
• Modelled a 9-state order lifecycle from pending through validating, splitting, and dual confirmation, with multi-business parent/sub-order splitting.

›5 Rails engines + 1 host API app

›135 migrations · 102 controllers · 90 models

›219 RSpec spec files across the five engines

• Built a Telegram ad-intelligence platform to rank channels by engagement, growth, and activity.
• Designed a Postgres → ClickHouse analytics pipeline for fast dashboards and large-scale querying.
• Automated near real-time refresh with Redis/Sidekiq and benchmarked query latency across stores.