Blog
Practical write-ups on full-stack development, SaaS architecture, payments, DevOps, and AI — from building real production products.
11 articles
5 min readRunning a Production SaaS on One VPS: Health-Checked Deploys and Backups You Actually Restore
You don't need Kubernetes to run a paid product. How I ran a multi-tenant SaaS on one VPS with Docker — self-rolling-back deploys and proven backups.
DevOpsDockerSaaS
5 min readProving Authorization Works: Executable Role and Scope Proof Suites
Reading the code isn't proof. Here's how I made data isolation demonstrable — tests that drive the real server and try to cross tenant boundaries.
SecurityAuthorizationTesting
5 min readAgent-Native SaaS: Exposing Your Product to AI Assistants Over MCP
Most products bolt on a chatbot. I built one where an AI assistant is a first-class operator, driving the whole product over the Model Context Protocol.
MCPAI AgentsSaaS
5 min readCompiling a Drag-and-Drop Flow Builder Into a Deployed Chatbot
A visual flow builder is a node graph plus a compiler. Here's how I turned a user's drag-and-drop chatbot into a real deployed bot.
ChatbotsCompilersNode.js
5 min readBuilding a Real-Time Voice AI Agent with Barge-In (Streaming STT to LLM to TTS)
How I built a phone-call-feeling voice agent — streaming STT into an LLM into TTS over WebSockets — where the caller can interrupt and the bot shuts up.
Voice AIWebSocketsReal-Time
5 min readA Two-Level Content-Moderation Pipeline: Fast L1 Gate, Async ML L2
How I moderated text, images, and video on one CPU VPS — a millisecond in-process gate for the obvious stuff, and an ML worker that runs only when it must.
Content ModerationMachine LearningPython
5 min readMicroservices That Stay in Sync Without a Shared Database (Redis Streams + Local Replicas)
How I let services react to new-user events without ever touching the identity database — Redis Streams consumer groups and per-service user replicas.
MicroservicesRedisArchitecture
5 min readServing Paid Downloads Safely with Short-Lived Signed URLs (S3/R2)
How I delivered paid files and course videos on a creator platform so a buyer gets their content but nobody can hot-link or share a permanent link to it.
S3Object StorageSecurity
5 min readCustom Domains with Automated SSL for a Multi-Tenant SaaS (Cloudflare for SaaS)
How I let every creator publish their storefront on their own domain — with HTTPS that just works — without wrangling a single certificate by hand.
SaaSMulti-TenantCloudflare
5 min readAutomated Marketplace Payouts with Stripe Connect: Idempotent Sweeps and Clawbacks
How I paid laundry suppliers automatically 48 hours after delivery — netting commissions, surviving retries, and clawing back refunds safely.
StripeStripe ConnectMarketplace
3 min readAuthorize at Booking, Capture at Weigh-In: Fair Marketplace Payments with Stripe
How to charge the exact final amount for an order whose price isn't known until later — using Stripe's manual capture — without ever overcharging the customer.
StripePaymentsNode.js