Case studies, not portfolio pieces.

ZATCA Phase 2 e-invoicing on Odoo 19 Enterprise

Live ZATCA Phase 2 e-invoicing integration for a multi-branch F&B operator, including a custom down-payment invoice numbering scheme and a later read-only compliance audit run directly against production.

Read-only audit scripts. Production never at risk.

Client

Multi-branch F&B group, Saudi Arabia

Year

2025

• Odoo 19 Enterprise
• Python
• XML-RPC
• ZATCA API

Two Czech payment gateways brought to the Odoo App Store

Built and published two payment gateway connectors for the Czech market — Pays.cz and Comgate — after establishing that Odoo 18 had no working e-commerce integration for either.

Client

Gumová Střecha

Year

2026

• Odoo 18
• Python
• Pays.cz API
• Comgate API

Automating construction progress billing under ZATCA Phase 2

Advance recovery and retention generated automatically on every progress invoice, at the correct accounts and VAT treatment — after testing proved the original design never fired in the real workflow.

Fifteen of fifteen tests passed against a feature that never once ran in production.

Client

Construction contracting firm, Saudi Arabia

Year

2026

• Odoo 19 Enterprise
• Python
• XML-RPC
• ZATCA Phase 2

XPEERX: a multi-chain custodial crypto platform, built for mainnet

Designed and hardened a custodial crypto deposit, custody and trading platform across six chains — deposit watchers, RPC failover, sweep automation and a security-audited admin/merchant surface — from testnet through to a live mainnet launch.

Six chains, one watcher that never silently falls behind.

Client

Self-funded fintech product (XPEERX)

Year

2026

• NestJS
• Next.js
• PostgreSQL
• BullMQ

One design system, twelve frameworks — the TABSAP admin shells

Twelve admin dashboard starters, each built natively in a different framework, all implementing one shared design contract — nine CSS tokens and seven theme presets that behave identically across every stack.

Client

TABSAP internal platform, used across client projects

Year

2026

• Next.js
• React
• Vue
• Angular

A Safe Browsing blocklisting that file cleanup could never have fixed

A client site was blocked by Google Safe Browsing. The phishing content was real, but it was never served from their server — a malicious wildcard DNS record pointed their subdomains at attacker infrastructure.

Client

Industrial supplier, South Asia

Year

2026

• cPanel
• DNS
• WordPress
• Google Search Console

Vision AI that verifies property leads, and traces the humans behind the LLCs

Two Node.js pipelines: one scores Street View imagery for multi-unit signals and routes leads by confidence into a CRM, the other identifies the people behind LLC-owned properties by fuzzy-matching against a 75,000-record dataset.

Client

Real estate investment firm, New York

Year

2026

• Node.js
• OpenAI Vision API
• Google Street View API
• Google Sheets API

Security audit of an AI-generated Supabase backend

Audited a largely AI-generated Supabase backend before production launch and found four critical issues, including a cross-tenant write path, delivered as a findings report followed by remediation.

AI wrote your backend. Who checked the RLS policies?

Client

US PropTech startup

Year

2025

• Supabase
• PostgreSQL RLS
• Next.js

Anti-corruption civic reporting platform, government scale

Architected a citizen corruption-reporting platform for a provincial government using a multi-agent architect-to-execution delivery pattern, with two reusable orchestration templates committed to the repo.

Client

Provincial government secretariat, Pakistan

Year

2024

• multi-agent orchestration
• S1/S2/S3/S4 delivery pipeline