Senior backend & platform engineer

Context. A real-time platform for live sporting events ran its workloads on on-prem and edge environments.

Decision. Lead the infrastructure modernization: migrate the workloads to cloud local zones and enable autoscaling, with multi-region load tests before peak events.

Stack. Cloud local zones · Autoscaling · Go · Python · Locust

Context. A legacy payment and settlement platform ran as batch processing on a monolith.

Decision. Move the core components to Java and Go, replace batch with streaming and change data capture, containerize on Kubernetes, and centralize logs and dashboards for the SLAs.

Stack. Java · Go · Streaming · CDC · Kubernetes

Context. Builds and coding-agent jobs start on a workstation but need the CPU, isolation and uptime of a remote fleet, without leaking a private worktree or losing work halfway.

Decision. A local daemon with a socket API and a written durability contract; content-hash sync so a job runs on exactly the bytes submitted; recovery bound to that content; a versioned accounting ledger; gVisor sandboxes on VPS runners behind a data-class gate.

Stack. Go · Rust · gVisor

Context. Can Firecracker microVMs, with the jailer, back an open-source agent sandbox runtime (OpenShell) through the whole lifecycle, and stay correct when things crash?

Decision. A compute driver with its own guest kernel, images from a verified catalog, reclamation of the previous run's VMs at start-up, and a guest flush before Stop.

Stack. Go · Firecracker · KVM

Context. My agent-workflow repository had grown a router, a scheduler, a coordinator hierarchy, a provider dispatcher and a dashboard in front of three coding-agent clients.

Decision. Retire it (19 October 2026). Each client runs natively; the repository keeps shared skills, a small configuration, standalone safety tools and 26 dated decision records.

Stack. Python · Bash

Context. Coding agents run shell commands in real repositories from three clients with three hook systems; secrets once reached a model through process arguments.

Decision. One command-safety hook for all three clients; output redaction; long-lived credentials kept out of worker reach; a missing safety dependency refuses instead of being caught and allowed.

Stack. Python

Context. A course platform gives every learner a disposable lab machine, created and destroyed constantly by many people at once.

Decision. A microVM lab runtime with a chaos test that kills VMs mid-session; idempotent resets by key; mutual TLS on a control-plane CA with reload without restart; pinned keyless signing that fails closed.

Stack. Go · Kotlin · protobuf

Context. The fastest way to understand a distributed database is to build its layers in order and see where each guarantee comes from.

Decision. Disk manager, buffer pool, B+ tree, heap file and write-ahead log; SQL parser, planner and Volcano executor; 2PL then MVCC; Raft, Multi-Raft with range sharding, Percolator-style transactions, SSI with hybrid logical clocks, an S3 backend and the PostgreSQL wire protocol.

Stack. Rust

Context. A personal job-search tool runs on several desktops plus a browser extension; data must sync without a central source of truth.

Decision. Tombstones pruned only once every active desktop has applied them; fill tokens signed on the desktop with a P-256 key from the OS keyring; an encrypted vault export; an LLM judge measured against blind readings.

Stack. Go · Rust

Context. Several GitHub and GitLab accounts on one machine means juggling keys, identities and signing by hand.

Decision. One command switches Git author, SSH key, commit signing and the GitHub CLI account, by alias or automatically by directory; releases through GoReleaser and a Homebrew tap.

Stack. Go · GoReleaser · Homebrew