CAPABILITIES / 10

Capabilities

Ten capabilities, each with the systems that prove it. The board is the short version; the matrix below is where each one was done, and every row opens the full page.

Green is in production; blue is from my roles; outlined is in training. A production rating needs a proof with a linked artefact. Sources and method.

01 / CAPABILITIES

What I can own, end to end.

Every rating links to the systems that prove it. Green is in production; blue is from my roles; outlined is in training.

3,530
commits in 12 months 1: source for commits in 12 monthsmeasured
1,318
merged pull requests 2: source for merged pull requestsmeasured
5
deployed systems whose first commit is mine 3: source for deployed systems whose first commit is minemeasured
2.9
years in software since Jan 2024 4: source for years in software since Jan 2024measured
Backend & APIsIn productionContract-first APIs and services, tested in CI116 → 692API routes on the Scheduler, 30 Apr → 15 Nov 2026TypeScriptNode.jsNestJSFastAPIFull-stack web, end to endIn productionFrom the domain model to the deployed product, solo131commits on StrikeHike main, all mine, 15 Nov 2026TypeScriptNext.jsNode.jsPostgreSQLDevOps & release engineeringIn productionTests before deploy, probes after, rollback ready31production deploys on Team RVM since 16 Oct 2026, all greenGitHub ActionsDockerCaddyNginxCloudIn productionAWS, Azure, Google Cloud and Supabase in productionAWSLightsail runs StrikeHike and this siteAWSAzureGoogle CloudSupabaseAWSAWS Glue (in my roles)AzureAzure Data Factory (in my roles)AzureAzure AI Foundry (in my roles)InfrastructureIn productionReverse proxies, TLS, containers, process managersCaddyTLS and routing in front of StrikeHikeCaddyNginxPM2DockerIntegrationsIn productionPayments, messaging, AI connectors, data APIsRazorpayorders, webhooks, refunds and GST invoices on the Job PortalRazorpayMCPOpenAPIResendBackends for Flutter appsIn productionThe API contract and backend a mobile team builds on163operations in the Team RVM API contractFlutter backendsOpenAPINode.jsPostgreSQLApplied AI & MLIn productionLLM features with guardrails, MCP connectors, MLOps11read-only tools in the Job Portal AI connectorPythonGeminiClaudeMCPData pipelines & schedulingIn productionIngestion and scheduled jobs that fail loudlyWeeklyevents bundle, Sunday 21:30 UTC on StrikeHikePythonGitHub ActionsAirflow (in my roles)AWS Glue (in my roles)Security by designIn productionLeast privilege, encryption and audit built inAES-256-GCMCHECK-enforced encryption in the AI trace storePostgreSQLSupabaseMCPOpenAPI

IN TRAINING

2 more await a source before they are shown. No certificate or course is claimed until one exists.

CAPABILITY / 01

Backend & APIs

In production

Production backends with tested routes, versioned migrations and an API contract that gates the deploy.

116 → 692

API routes on the Scheduler, 30 Apr → 15 Nov 2026

Source

163

operations in the Team RVM API contract

Source

3,640

Scheduler backend tests passing in CI, 15 Nov 2026

Source

WHERE I'VE DONE IT

STACK

TypeScriptNode.jsNestJSFastAPIPostgreSQLOpenAPI

ENGINE · CORE SYSTEM

CAPABILITY / 02

Full-stack web, end to end

In production

Whole products, not fragments: schema, API, interface, tests and the deploy that carries them.

131

commits on StrikeHike main, all mine, 15 Nov 2026

Source

99 / 100

commits on Singh Furncraft, built solo

Source

399 / 866

Job Portal commits on main, the most of anyone

Source

WHERE I'VE DONE IT

STACK

TypeScriptNext.jsNode.jsPostgreSQLSupabasePlaywright

ENGINE · FAN SYSTEM

CAPABILITY / 03

DevOps & release engineering

In production

Release paths that fail safely: tests gate the build, probes check the live system, and the previous images stay ready.

31

production deploys on Team RVM since 16 Oct 2026, all green

Source

Probes

health, data, TLS and a real API response after cutover, then rollback on failure

Source

3,640

Scheduler backend tests gating the deploy

Source

WHERE I'VE DONE IT

STACK

GitHub ActionsDockerCaddyNginxPM2Prometheus (in my roles)Grafana (in my roles)

ENGINE · OIL SYSTEM

CAPABILITY / 04

Cloud

In production

Production cloud: AWS Lightsail, Azure App Service on StrikeHike v1, Google Cloud with OAuth and the Meet/Calendar APIs, Supabase Postgres.

AWS

Lightsail runs StrikeHike and this site

Source

Azure

App Service ran StrikeHike v1

Source

GCP

Google Cloud project, OAuth and the Meet REST API (v2); Calendar API

Source

WHERE I'VE DONE IT

STACK

AWSAzureGoogle CloudSupabaseDockerCaddyAWS ▸AWS Glue (in my roles)Azure ▸Azure Data Factory (in my roles)Azure ▸Azure AI Foundry (in my roles)

ENGINE · PYLON SYSTEM

CAPABILITY / 05

Infrastructure

In production

The unglamorous layer that keeps a product reachable: proxies, certificates, containers and supervised processes.

Caddy

TLS and routing in front of StrikeHike

Source

Nginx · PM2

reverse proxy and process supervision on the Scheduler

Source

Docker

Compose stacks built and cut over on deploy

Source

WHERE I'VE DONE IT

STACK

CaddyNginxPM2Docker

ENGINE · MOUNTS SYSTEM

CAPABILITY / 06

Integrations

In production

Third-party systems wired in with signatures and an audit trail: payments, messaging, AI tool access and data APIs.

Razorpay

orders, webhooks, refunds and GST invoices on the Job Portal

Source

11

read-only tools in the Job Portal MCP connector

Source

92

read-only tools in the Scheduler ops/HR connector

Source

WHERE I'VE DONE IT

STACK

RazorpayMCPOpenAPIResend

ENGINE · GEARBOX SYSTEM

CAPABILITY / 07

Backends for Flutter apps

In production

Backends and contracts for Flutter apps: the mobile developer writes the UI; I own the API, data and release behind it.

163

operations in the Team RVM API contract

Source

1,321

contract tests checking every reply

Source

Flutter

worker app built by teammates on the BadaBhai backend

Source

WHERE I'VE DONE IT

STACK

Flutter backendsOpenAPINode.jsPostgreSQL

ENGINE · IDG SYSTEM

CAPABILITY / 08

Applied AI & ML

In production

AI that touches real systems through a scoped identity, with traces and an audit trail around it.

11

read-only tools in the Job Portal AI connector

Source

92

read-only tools in the Scheduler ops/HR connector

Source

AES-256-GCM

CHECK-enforced encryption in the AI trace store

Source

WHERE I'VE DONE IT

STACK

PythonGeminiClaudeMCPAzure ▸Azure AI Foundry (in my roles)Airflow (in my roles)

ENGINE · FADEC SYSTEM

CAPABILITY / 09

Data pipelines & scheduling

In production

Data that arrives on time and jobs that say when they do not: scheduled ingestion, reconciliation and backups.

Weekly

events bundle, Sunday 21:30 UTC on StrikeHike

Source

10 min

in-process reconciliation with a soft lock on the Job Portal

Source

Gated

events bundle: quality gate, health check, rollback to the previous bundle

Source

WHERE I'VE DONE IT

STACK

PythonGitHub ActionsAirflow (in my roles)AWS ▸AWS Glue (in my roles)Azure ▸Azure Data Factory (in my roles)PostgreSQL

ENGINE · FUEL SYSTEM

CAPABILITY / 10

Security by design

In production

Access that is scoped, tokens that rotate, data encrypted at rest and sensitive calls on the record.

AES-256-GCM

CHECK-enforced encryption in the AI trace store

Source

Rotating

hashed refresh tokens; reuse revokes the family

Source

5 tables

append-only audit trail on the Scheduler

Source

WHERE I'VE DONE IT

STACK

PostgreSQLSupabaseMCPOpenAPI

ENGINE · FIREWALL SYSTEM

02 / MATRIX

Where each capability was proven.

Case studies

A filled dot links to the project or case study; an empty cell means no entry for that pair.

Capability matrix: a filled dot links to the project or case study; an empty cell means no entry for that pair.
CapabilityBadaBhaiJob PortalSchedulerTeam RVMStrikeHikeSingh Furncraft
Backend & APIs●Yes●Yes●Yes●YesNoNo
Full-stack web, end to endNo●YesNoNo●Yes●Yes
DevOps & release engineeringNoNo●Yes●Yes●YesNo
CloudNo●Yes●YesNo●YesNo
InfrastructureNoNo●Yes●Yes●YesNo
IntegrationsNo●Yes●YesNo●YesNo
Backends for Flutter apps●YesNoNo●YesNoNo
Applied AI & ML●Yes●Yes●YesNoNoNo
Data pipelines & schedulingNo●YesNoNo●YesNo
Security by design●Yes●Yes●YesNoNoNo

● = a capability entry with a linked artefact. Rows link to the capability page; columns link to the system.

Looking for the systems themselves? Projects has the four RVM platforms and StrikeHike; Work has the case studies.

03 / WHAT'S NEXT

On order

As of 14 Nov 2026

Planned and in progress; listed here as intentions, not experience.

ESC

↑ ↓ to move · Enter to open · Esc to close