Platform architect · AI agent builder - I design platforms and AI agents
Shipping in production right now
Costia, a family of AI apps
Everyday apps with AI where it actually helps. One account and one Premium subscription for all of them: the essentials are free, and Premium switches on the AI in every app. I design, build, ship and run them end to end, from the store to the cluster.
Costia Menu
iOS · Android · Web
Restaurant software: an online menu, ordering from the table, and screens for the kitchen and the bar.
Featured apps
Two native Android and iOS apps I design, build and operate, each with an integrated AI assistant that works on your own data.
Costia Finance
AI-powered personal and shared expense manager. Scans receipts and invoices to create expenses in seconds, splits group bills Tricount-style, and delivers advanced statistics on where your money actually goes. It is offline-first — everything is stored on device and synced to the cloud when you are online — and it also acts as an identity provider, exposing a public API so other apps can push invoices straight into a user's account.
- Logs new expenses from chat, voice or a photo of the receipt.
- Builds custom charts from the data you create.
- Analyses your spending and gives concrete saving tips.
Costia Training
A strength-training log for iOS and Android. You pick a routine or build one from four answers — goal, days per week, minutes per session and the kit you have — and in the gym you log what you actually lifted: weight, reps, and how many you had left. It keeps personal records as a history rather than a number that keeps being replaced, draws each lift's progression, and tells you what to put on the bar next. It works with no account at all: everything lives on the device, and signing in later uploads all of it in one go. Account and subscription are shared with Costia Finance.
- Advice on every workout: technique, rest and volume.
- Adapts the routine when pain or discomfort shows up.
- Walks you to your goals with the right load progression.
Other projects
Ambrosia Recommender
Personalized supermarket assistant that revolutionizes the shopping experience. Learns your food preferences, manages dietary restrictions and allergies, suggests recipes based on your favorite ingredients, and helps you discover new products that align with your tastes. The system continuously adapts to your shopping habits, optimizing shopping lists and avoiding waste. You can now sign in with your Costia account, so every purchase lands straight in your expenses — no receipts to copy by hand.
- Learning Mode
- Adaptive AI
- Integration
- Chat, API & Costia
The Unreal Times
A digital newspaper written entirely by AI — "the most reliable fake news". From a single prompt it produces the whole story: headline, standfirst, body and category, holding a journalistic tone and adapting to whichever language you pick. Every edition ships numbered by volume with its own top story, and pieces are filed across nine sections, from politics and economy to science, sports and culture.
- Status
- In production
Open-source tools
Utilities that came out of a real problem while working with clusters and agents, released under MIT for whoever runs into the same thing.
gq
A yq-compatible YAML and JSON processor that leaves Go templates untouched. It edits Helmfile values inside .gotmpl files without breaking the template expressions, resolves conditional blocks against a values file, and renders the full template.
- License
- MIT
Manual Todos
Claude records the manual steps only you can take — a form in some console, a secret to seed, a review to answer — in local SQLite, and you work through them on a board that looks different for every project.
- License
- MIT
Ambrosia × Costia
My products don't live in isolation — they talk to each other over open standards. Sign in to the supermarket with your Costia account and every purchase shows up in your expenses on its own.
Reading and writing are independent permissions, not a ladder: a shop writes and never reads. Only invoices:write requires verifying your brand's domain.
https://id.costia.app/.well-known/openid-configuration
Sign in with Costia
Costia is a full OpenID Connect provider on top of an OAuth 2.1 server: authorization code only, PKCE with S256 mandatory for every client, and neither implicit nor password among the grant types. Client authentication uses HTTP Basic, and the id_token returns a stable subject identifier plus the user's name and verified email.
Public invoices API
With invoices:write, Ambrosia pushes every purchase — line items, amounts and VAT rates — straight into the user's Costia expenses, no OCR and no receipt photos. With invoices:read another app can read them back, a tax adviser at filing season for instance. Writing requires proving you control your brand's domain.
Developer documentation
Client registration, the login flow, invoice submission, and a reference for scopes and error codes. Any merchant can integrate by following the same steps, once their domain is verified.
What I do
Two lines of work on the same engineering: platform architecture, and the AI products I design and operate.
Kubernetes in production
Migrating live customers off Docker Swarm onto Kubernetes with minimal downtime, across Google Cloud, Azure and on-premise clusters, with high availability and resilience designed in from the start.
One platform, many customers
The same architecture for everyone, adapting only what a given customer genuinely needs: cluster parameterisation, configuration and secret management under one shared standard.
Automated delivery
Images, Helm charts and Helmfile, database migrations, ingress, storage and version upgrades, all inside CI/CD pipelines with the manual steps cut down to as close to zero as it gets.
Agents in production
Agents in users' hands, with everything that forces: evaluating them, correcting them, and holding them up when the model shifts underneath. From code reviewers to assistants that learn from each person.
AI product, end to end
From the model to the app someone opens daily: backend, mobile, payments, offline sync, and all the unglamorous work between an idea and something people use.
Built on open standards
OpenID Connect, OAuth 2.1 and public APIs so my products talk to each other — and to other people's — instead of bespoke integrations that only work once.
From backend to platform
The apps above are what I build in my own time, with a company in mind. This is what I have done working for others: the same hospital product, two companies and four stages.
Backend developer · SINASUITE HIS-EHR
Backend of the SINASUITE hospital information system and its applications (patient portal, patient follow-up, magic links): Java 8/11 on JBoss EAP and WildFly with Spring Framework, new features, production incidents, regression testing and heavyweight SQL. Also a reproducible development environment and tooling so the team works better, with AI and without it.
- Java 8/11
- Spring Framework
- JBoss EAP / WildFly
- Maven
- SQL Server
- PostgreSQL
Backend developer
SINASUITE splits from Lãberit and becomes a company dedicated solely to the hospital suite: electronic health record, operating-theatre planner, patient app. I stay on backend through the transition: a Spring Boot Starter for centralised OAuth2 token management and hospital-system integrations over RabbitMQ and Mirth Connect.
- Java
- Spring Boot
- OAuth 2.0
- RabbitMQ
- Mirth Connect
Software architect · architecture team
I join the architecture team to build the proof of concept of a Kubernetes deployment system for the whole suite, automated and self-configuring as far as it goes, so it can run on whichever infrastructure each customer picks: highly available, scalable, with Blue-Green and Canary rollouts. Helm charts, images, Helmfile flows, Istio as service mesh and GitLab CI pipelines.
- Kubernetes
- Helm
- Helmfile
- Istio
- GitLab CI
- Blue-Green
- Canary
- Google Cloud
- Azure
- On-premise
Platform team lead
A platform team is formed and I lead it. First customers deployed with the new system and migration of those coming from Docker Swarm, with minimal downtime and no compromise on their data, across Google Cloud, Azure and on-premise. Secrets through External Secrets Operator, GitOps with Argo CD and one platform for every customer.
- Platform team
- Kubernetes
- Helm + Helmfile
- External Secrets
- Docker Swarm → Kubernetes
What I work with
The stack behind the hospital platform and the AI products. Nothing that is not in production.
Platform & cloud
- Kubernetes
- Argo CD
- Helm
- Helmfile
- Istio
- Cilium
- Gateway API
- cert-manager
- External Secrets
- CloudNativePG
- GitLab CI
- Docker
- Google Cloud
- Azure
- On-premise
Backend
- Java
- Spring Boot
- PostgreSQL
- RabbitMQ
- Valkey
- Elasticsearch
- Qdrant
- PowerSync
- Cloudflare R2
AI & agents
- LLM agents
- AI SDK
- Vercel AI Gateway
- Vision (receipts)
- assistant-ui
Mobile & web
- React Native
- Expo
- Native apps (Android · iOS)
- Next.js
- React
- TypeScript
- Tailwind CSS
Integration & standards
- OAuth 2.1
- OpenID Connect
- PKCE S256
- JWKS
- REST
- Mirth Connect
Let's talk
If you're moving a platform onto Kubernetes, or you want an AI agent to get past the demo and into production — or both at once — drop me a line.