A sample of recent engagements. Client names available on request.
-
Applied AI · Delivery
A governed fleet of autonomous engineering agents
The problem. A small development team supporting a growing
portfolio of production portals, with more backlog than hands and no appetite for
unsupervised AI touching production code.
What I did. Designed and built a platform that takes a written
work order, implements it inside the target repository's own guardrails, and merges
only when that repository's gates pass. Independent review gates sit in front of and
behind the work; every run carries a full event log, cost and token accounting, and
an audit trail of who approved what.
The controls are claims to be tested, not articles of faith. Every
blocked run is scored — fair block or false alarm — and a new check runs advisory,
recorded but not blocking, until the evidence says it has earned the right to say
no.
The outcome. Routine, well-specified change now moves from written
work order to merged code without a human reading the diff — and the controls that
make that defensible are measured, not assumed.
-
Architecture · Compliance
In-country data residency where the platform offered none
The problem. Client data subject to POPIA had to remain in South
Africa. The managed database platform in use had no South African region, and
re-platforming the applications was not viable.
What I did. Designed a self-hosted equivalent of the managed
stack running in AWS af-south-1, reduced to a single provisioning command —
private networking with no inbound SSH, session-manager-only access, automated
backups, and alarms on the paths that matter.
The outcome. Applications kept their existing data layer and API
surface while the data itself stopped leaving the country. The same toolkit now
stands up further in-country environments in minutes rather than weeks.
-
Integration · Operations
One brokered path through a firewall that blocked everything else
The problem. Client-facing applications needed data from a legacy
policy administration platform, but each client site's firewall whitelisted only
specific origins. Direct integrations worked in development and failed in
production.
What I did. Consolidated every integration onto a single brokered
service layer holding the credentials server-side, with one whitelisted egress
path and a uniform contract for the applications in front of it.
The outcome. New integrations became a configuration change
rather than a firewall negotiation, and credentials left the client applications
entirely.
-
BPO · Process
Replacing a manual reporting cycle with an automated one
The problem. Weekly client billing depended on someone manually
collating time records across projects — slow, late, and inconsistent enough to
cost real revenue at invoice time.
What I did. Designed and implemented an automated cycle that
draws time records directly from the tracking system, applies the commercial rules
per project and work type, and issues the report to its recipients on schedule —
with every run logged and re-runnable for a given period.
The outcome. The reporting week closes on time without manual
effort, and disputes are settled against a recorded, reproducible extract.