Sivaram Pandariganthan

GreetWala

A live catalogue of AI-generated greeting cards for Indian festivals and occasions in 12 languages, with 1,520 cards across 190 collections produced and published by an automated pipeline.

• Greeting text never comes from the image model: idiomatic phrases are drafted with web search and verified by a three-model jury (2/3 majority), and generation aborts before spending if a spec carries an unverified phrase
• Vision-model QA on the published artifact catches broken Indic conjuncts, wrong matras and clipped text; failures regenerate idempotently, converging from 93% to 99.3% pass in two rounds
• Prerendered pages on Cloudflare Workers and a zero-egress Tigris image CDN serving watermarked derivatives, with clean masters kept private behind presigned downloads

OpenRouter

Sharp

TanStack Start

Cloudflare Workers

Hono

Postgres

Drizzle

Railway

PostBoo

Pre-launch

Social media scheduling across 12 platforms, with an MCP server and a typed REST API so AI agents can schedule posts as well as people.

• Two-level publish state machine on pg-boss in Postgres: an attempt row is written before every platform call, and unknown outcomes go to a verifying reconciler instead of a blind retry, because a double post is worse than a missed one
• Twelve providers behind one OAuth/publish interface with a normalized error taxonomy; tokens are AES-256-GCM encrypted and refreshed single-flight under row locks, since X and TikTok rotate refresh tokens on use
• OAuth-granted MCP access with per-plan quotas enforced by atomic conditional increments, a DNS-rebind-aware SSRF guard for Mastodon instances, and webhook-mirrored billing with out-of-order event protection

Hono

oRPC

Postgres

Drizzle

pg-boss

MCP

TanStack Start

Cloudflare Workers

Sarathi

Pre-launch

An AI strategy studio and execution bridge for Indian intraday F&O. A trader's own TradingView alert becomes an order card in Telegram and on the web, and nothing reaches their broker until they tap Confirm.

• Compliance by construction: no custody and no autonomous mode, so the human confirm is a required step in the data model; one decide() path serves the Telegram bot, the dashboard and the expiry sweeper, and every signal, decision and fill is journaled
• Per-user webhooks that acknowledge inside TradingView's 3-second timeout before Telegram delivery, with dedupe, an instrument-universe gate, and envelope-encrypted broker credentials under rotatable keys
• A strategy-studio agent that writes and validates Pine Script v6 with batched human-in-the-loop questions and versioned diffs, billed from an idempotent prepaid-credit ledger through budget-capped per-user OpenRouter keys

Hono

oRPC

Postgres

Drizzle

Telegram

OpenRouter

Stripe

Clerk

Riby

Pre-launch

The pager for AI agents. An agent in Claude Code, Cursor or any MCP harness pages its human for a permission, a plan check or a steering decision; the request lands in Telegram, Discord or the dashboard, and one tap sends the answer back to the waiting agent.

• Requests block correctly where hosted tools time out: a local stdio MCP server keeps the call alive with progress notifications, and the API wakes the waiting agent with a Redis push over long-poll
• Safe by default: unanswered requests expire to deny after a six-hour TTL, the first answer wins atomically across every channel, and chat messages edit in place once resolved
• An append-only on-device ledger lets a crashed agent resume exactly where it left off, alongside device-code CLI login, hashed agent tokens, idempotent request creation and hard payload caps at the API

MCP

Hono

oRPC

Postgres

Drizzle

Redis

Telegram

TanStack Start

Sourcewell

Internal Tooling

A private, local-first research gateway that gives coding agents one loopback-only interface to five web-research providers: Context7, Exa, Firecrawl, Parallel and Tavily. It returns the evidence providers found, in full, and never writes its own summaries.

• AES-256-GCM credential vault (macOS Keychain or Docker file key) that rotates across provider keys with per-credential concurrency leases, pacing, cooldowns and stale-lease recovery
• Every request, execution, artifact and finding persisted in SQLite, so index views stay small and full evidence can be inspected later without a second paid provider call
• Near-duplicate clustering and conservative independent-source counts that never hide or rerank evidence, plus a Better Auth admin console and a Docker Compose stack bound to 127.0.0.1 behind Caddy

Hono

oRPC

SQLite

Drizzle

Better Auth

TanStack Start

Docker

InferPlane

In Stealth

An AI control plane for teams: governed model access, credit metering, retained LLM request logs, and audit trails across providers. Currently building in stealth.

• Append-only credits ledger with reservation/settlement lifecycle and idempotency guarantees
• OTLP ingestion of provider usage telemetry, with request/response artifacts archived to object storage
• Hardened Hono/oRPC API with org-scoped rate limiting; the control plane comes before the product surface

Hono

oRPC

Postgres

Drizzle

Redis

Trigger.dev

Stripe

Cloudflare

stackfight

A credit-billing & AI-usage-metering platform on Cloudflare Workers, exercised in production by live agent-vs-agent games.

• Stripe-funded prepaid wallets with fail-closed webhook fulfillment and idempotent integer-microcredit ledger writes
• Per-call inference metering with budget-capped OpenRouter keys and automated ledger reconciliation
• Financial invariant auditing (balance floors, ledger conservation), an extensive test suite, and rigorous ops documentation

Cloudflare Workers

Durable Objects

Stripe

OpenRouter

Postgres

Drizzle

1-cent-requests

A live x402 pay-per-request API marketplace: 14 crypto/web-context endpoints for AI agents at $0.01 each, settled in USDC through signed HTTP 402 exchanges. No accounts, no API keys.

• Full x402 v2 resource-server implementation: EIP-3009 USDC authorizations with facilitator verification
• Single payment-gate middleware over a typed service catalog, with per-route unit-economics tracking
• Agent-native discovery (OpenAPI, llms.txt); deployed on Cloudflare Workers + D1 via IaC

x402

USDC

Hono

Cloudflare Workers

Cloudflare D1

Drizzle

varam.chat

Invite-only

A live, self-hosted multi-model AI chat platform routing 23 models through OpenRouter. Production plumbing throughout, running daily.

• Every response persists full inference telemetry (token usage, TTFT, tokens/sec, provider metadata) to Postgres as an auditable usage trail
• Price-floor cost routing with flex service tiers, and resumable Redis-backed streams that survive client disconnects
• Sandboxed agentic tool execution (code sandbox, web search, docs retrieval) and atomic Lua-scripted rate limiting

OpenRouter

AI SDK

TanStack Start

Postgres

Drizzle

Redis

E2B

Varam Analytics

Invite-only

Self-hosted, cookieless web analytics, running in production and powering the analytics on this very site.

• Dependency-free tracker script, Bun/Hono event collector, and a TimescaleDB event store
• Ingestion with Redis rate limiting, sequence-based deduplication, and realtime visitors via sliding-window sorted sets
• Hypertables with compression, retention policies, and continuous aggregates precomputing bounce rate, session duration, and scroll depth

Bun

Hono

TimescaleDB

Redis

Drizzle

Railway

A pay-per-audit security service for Solidity contracts: submit a repo, get a verified findings report. Built end to end as a working prototype, never launched commercially.

• A consensus pipeline rather than a single model call: four analysis agents run in parallel, three jurors then vote on every candidate finding, and only deadlocked findings escalate to a judge model
• Six static-analysis tools (Slither, Aderyn, Mythril, Echidna, Solhint, Surya) run alongside Foundry in purpose-built e2b sandboxes, so their output grounds the model rather than the reverse
• Benchmarked against the SmartBugs Curated dataset with vulnerability annotations and suggestive filenames stripped first, to keep the models from reading the answers off the contracts

OpenRouter

Hono

oRPC

Postgres

Drizzle

Redis

Next.js

Bun

Signal Brief

Internal Tooling

A cost-aware, multi-source LLM research pipeline over X, Reddit & Hacker News, at ~$1/day all-in.

• A cheap-model triage gate scores every candidate before any paid scrape or frontier-model call is spent
• Every run reconciled against the provider's actual billing ledger, not estimates
• Parallel per-source fan-out with cross-platform corroboration, citation-backed daily digests, and one-click publishing to dev.to

OpenRouter

Postgres

Drizzle

Firecrawl

TanStack Start

SuperPower

Case Study

Closed Source

A crypto-native platform selling autonomous AI agents for USDT on BNB Chain: each purchase auto-provisioned a dedicated, cert-pinned VM from golden images in about two minutes, running a full agent with chat, skills, and an operator wallet. Built and operated solo, end-to-end, in 15 weeks. The product has since been sunset; the engineering stands.

• VM fleet automation: golden-image provisioning, capacity-aware size fallback, orphan-leak prevention, and ordered, never-throwing teardown
• Integer-credit LLM metering ledger with per-key provider spend caps, top-ups, and drift reconciliation across a dozen monitoring crons
• Crash-safe two-phase on-chain USDT orders with gas-sponsored server-side signing, plus a 30-day subscription state machine (charge → grace → rescue → teardown)
• Multi-level referral compensation computed in-transaction via recursive CTEs, a full admin surface, and three-language i18n
• An isolation proxy as sole ingress to the fleet (per-VM TLS pinning, RPC allowlisting, fleet-wide model overrides) and an agent-operated wallet CLI with OAuth device flow + HPKE

OpenRouter

viem

BNB Chain

Privy

Hono

oRPC

Postgres

Drizzle

DigitalOcean

AWS KMS

Prolly.so

Case Study

Closed Source

An AI-powered, on-chain prediction-market platform, built as sole engineer through three client rebrands over ~13 months.

• Core CPAMM contracts audited by ScaleBit (BitsLab): zero critical and zero major findings, with every finding remediated, including a rounding correction that now favors the pool
• Multi-LLM consensus oracle (Claude + Gemini + Grok over multi-source evidence) autonomously resolving markets on-chain
• Two-phase USDT checkout with advisory-lock inventory reservation and mempool-aware reconciliation crons
• Four Solidity generations under a Foundry fuzz suite, from V5 through a post-audit V8 with configurable pool parameters, plus Solana (Rust) and Move ports
• A scheduled job fleet, Telegram/Discord/Twitter bots, and a key-authenticated agent API with an MCP server

Vercel AI SDK

Solidity

Foundry

Rust

Solana

tRPC

TimescaleDB

Trigger.dev

Hotly

Client work

Closed Source

A live creator-payments platform: fans send paid letters, creators answer on a weekly schedule and keep 100%. Brought in for a five-week security & privacy overhaul of message storage, spanning the Go + Postgres backend, the Next.js frontend, and the admin tool.

• Per-message AWS KMS envelope encryption for private paid fan letters: AES-256-GCM data keys with AAD bound to thread and message IDs, backed by a normalized ciphertext and audit schema
• Zero-downtime cutover design: encrypted writes with legacy plaintext fallback on read, an idempotent internal backfill endpoint behind an API key, and a cleanup migration that refuses to drop plaintext until every row is verifiably encrypted
• Admin peek-to-reveal built fail-closed: messages stay hidden by default, and a decrypt request fails unless its audit row (actor, access path, grant mode) is persisted
• Benchmarked per-message KMS decrypt latency (p50/p95) against production ciphertexts to validate render-time decryption cost before cutover
• Earlier in the engagement: share-slug deep links and DOM-to-PNG share cards for public community notes, plus an AI reply-review dashboard for creator responses

Go

AWS KMS

Postgres

Next.js

SpotRoyale

Client work

Closed Source

A fractional music-royalty marketplace: sellers list a share of a song's royalties, investors buy via Stripe (card + stablecoin), and ownership is minted as an ERC-721 certificate on Polygon mainnet.

• Idempotent Stripe checkout and signed webhooks driving a 7-state settlement pipeline (payment → mint → on-chain confirmation) on a job queue
• Failed/refunded purchases excluded from ownership accounting; on-chain metadata with dynamically generated SVG certificates
• Streaming-data valuation pipeline aggregating billions of plays

Stripe

Solidity

Polygon

Next.js

Hono

oRPC

Postgres

Drizzle

pg-boss

Open-source parimutuel binary prediction markets for EVM and Solana. Unaudited and educational by design: an independent, clean-room companion to my client prediction-market work.

• Gas-optimized Solidity implementation backed by a comprehensive Foundry suite (unit, integration, and fuzz tests)
• Rust/Anchor port with PDA vault architecture and its own TypeScript test suite
• Both walked through end-to-end in a two-part guide series on dev.to

Solidity

Foundry

Rust

Anchor

ERC20

SPL

An npm CLI that turns one image (SVG or raster) into 118 production-ready PWA icons in under a second.

• iOS, Android, Windows 11, favicons, and multi-size ICO from a single SVG or raster input
• 2.5k+ downloads on npm, thoroughly tested with cross-platform CI on Linux and Windows

TypeScript

Sharp

resvg

Bun

A CLI that makes git worktrees practical: spin up several branches side by side, get an editor workspace wired to all of them, and tear the whole set down when you're done.

• Creates multiple worktrees in one command, generates a multi-root editor workspace, and opens it in VS Code, Cursor, Windsurf, Zed, or Trae
• Named sessions save and restore a working set of branches; orphaned worktrees are detected and pruned
• Ships as executable TypeScript on Bun with schema-validated config, and only two runtime dependencies

TypeScript

Bun

Display Your Bags

Closed Source

An embeddable badge service for Bags.fm tokens: paste a token address, get a live SVG badge of its creator fees and market data to drop into a README or a site.

• Badges are rendered server-side in Go with avatars inlined as base64, because remote images are blocked inside SVGs on GitHub and X, which is what makes them work anywhere
• Layered per-source cache TTLs in Redis, with the SOL price falling through Jupiter to Binance to a floor value so a badge never fails to render
• Runs on a single VPS behind nginx from a distroless image, with graceful shutdown, per-IP rate limiting, and stale-while-revalidate cache headers

Go

Redis

React

Docker

Site Metadata Explorer

Closed Source

A live web tool that audits a site's entire metadata surface in one scan.

• Meta/OG/Twitter tags, JSON-LD, robots.txt, sitemaps, web manifest, security.txt, and llms.txt, with per-file size reporting
• Exports any scan as LLM-ready Markdown with one-click handoff to Claude, ChatGPT, or Gemini

Next.js 16

React 19

Cheerio

Tailwind 4

rawdocs

Redeploying

Closed Source

A database-free docs proxy that serves any GitHub repo's markdown to both humans (SSR tree view) and LLMs (auto-generated llms.txt, content negotiation by Accept header).

• Circuit-breakered source abstraction with automatic fallback between upstreams
• Two-tier caching: in-process LRU plus CDN edge headers
• Structured request logging that classifies AI crawler traffic (GPTBot, ClaudeBot, Perplexity)

Bun

Hono

Fastly CDN

Docker

Railway

Tuulkit

Closed Source

25 browser-based developer utilities in one app, deployed at the edge on Cloudflare Workers.

• In-browser ML background removal running entirely client-side: GPU-accelerated ONNX, no server round-trip
• WASM-powered hashing, compression, and JSON-to-TypeScript codegen
• JSON tooling, image compression, PWA asset generation, and more

React 19

TanStack Start

onnxruntime-web

WASM

Cloudflare Workers

markdownbin

Closed Source

A zero-knowledge markdown pastebin: end-to-end encrypted, statically rendered, and correct in every writing system. Live in production since 2025.

• Client-side AES-256-GCM encryption (PBKDF2, 310k iterations) with self-decrypting share links
• The server only ever stores ciphertext; passwords ride the URL hash without touching the wire
• Passwords are NFC-normalised before key derivation, so an accented or Korean password derives the same key on macOS, Windows and Linux
• Correct emphasis and autolink boundaries in Chinese, Japanese and Korean, where CommonMark's delimiter rules break next to ideographic punctuation
• Every paste is prerendered as an immutable static page; a shared link never re-renders and never hits the database
• Live preview runs the same renderer as the published page, in a CodeMirror 6 editor assembled from hand-picked extensions

Next.js

React 19

Tailwind 4

CodeMirror 6

Shiki

KaTeX

Mermaid

Web Crypto

Brotli

Swapi.info

Open Source

An open-source, static-first Star Wars API serving 6.1M requests across 33K unique edge clients in 30 days, with 80% handled by CDN cache.

• Static JSON architecture: no application server or database, just clean CDN rewrites
• Approximately 205K requests served daily, most offloaded to Cloudflare
• No keys, no rate limits, with public uptime monitoring

Next.js

Static JSON

CDN edge

Anaek Desilog

Open Source

Free, CC0 Desi/Indian placeholder-image APIs for anyone who wants placeholders with desi flair.

• Dynamically sized avatars and characters, in colour or black & white
• Static-first delivery split across Vercel and Cloudflare Pages for high availability

Next.js

Vercel

Cloudflare Pages

A self-hosted trading assistant for prediction markets: strategies are evaluated against technical indicators, and every proposed trade goes to Telegram or Discord for a human to approve or reject before anything executes.

• User wallet credentials are sealed with AES-256-GCM envelope encryption, each value carrying its own salt, IV, and auth tag
• Eight background workers take their dependencies by injection rather than importing singletons, so the strategy and risk logic is tested in full without a database or queue
• BullMQ pipeline with dead-letter queues, per-API sliding-window rate limiting, and quiet-hours deferral for notifications

Bun

Hono

oRPC

Postgres

Drizzle

Redis

Next.js

A complete waitlist flow with X sign-in, Solana wallet linking, and a referral leaderboard, built in under two hours as a scoped speed test and open-sourced as a template.

• Turborepo monorepo with five packages, typed end to end from Zod schemas through oRPC procedures to the client, with server and client env vars validated at separate boundaries
• Referral codes match case-insensitively in SQL while preserving the original handle casing for display
• Written up as a playbook on shipping this class of app quickly, including how to tell a real opportunity from a fake one

Next.js

Turborepo

oRPC

Postgres

Drizzle

Bun