Our work

Rebuild the front end as a headless React/TypeScript storefront with checkout kept on a hosted commerce platform, served by a single Go service on Cloud Run. Purchases arrive as HMAC-verified webhooks that pass through an idempotency ledger and then three-way identity resolution, a signed token bridge, then an email match, then a pending-access queue claimed on next login, so even a guest checkout binds to an account, and refunds revoke entitlement by reason code.

• Go
• TypeScript
• MySQL
• Cloud Run
• Secret Manager
• Google Cloud

Automate the maturity audit; score every service against a fixed rubric by mining Git, CI, and observability data, keeping the history in BigQuery so trends are queryable and served through a dashboard. Give engineers self-service network diagnostics that run from inside the target cluster as ephemeral Kubernetes Jobs (correct network position, torn down after each run), so the common answers no longer need a human in the loop.

• Go
• BigQuery
• Kubernetes
• GKE
• Terraform
• Google Cloud

Reconstruct the missing daily event stream by diffing consecutive snapshots, modeling window roll-off as its own category so gifts aging out aren't reported as churn, and refuse to compute the misleading cumulative total, naming every field for what's actually true of windowed data. Enforce the public/private split at the API boundary with a separate DTO that has no sensitive fields by construction, served as a stateless Next.js app on Cloud Run reading object storage through a bound service account, with computed results cached behind a short-TTL freshness check.

• TypeScript
• Cloud Run
• Google Cloud

Claim an idempotency ledger keyed on (order, event) atomically before any side effect so a grant can never double-run, revoke on refund by reason code, and when a paid amount doesn't match the expected price still provision but record the discrepancy for reconciliation instead of silently failing a paying customer, plus alert on the silent-failure class where you correctly return 200 to the processor but a downstream step failed and no 5xx exists to catch it. For the data itself: verified TLS with a pinned CA and a startup check that reads the actually-negotiated cipher rather than trusting config, secrets fetched at runtime from a secret manager, and any automated state change gated behind human approval.

• Go
• PostgreSQL
• Cloud Run
• Secret Manager
• Google Cloud

Cache computed results at TTLs tuned per surface, using a cheap short-TTL listing/version check as the freshness signal so you're never blind to new content for more than a few seconds, and run stateless containers on Cloud Run behind a global HTTPS load balancer with CDN-fronted object storage for assets. Enforce the public boundary with a dedicated DTO whose sensitive fields don't exist, and for large downloads raise the request timeout and remove any middleware that buffers the whole response, since serverless response-size limits will otherwise sever the stream.

• Go
• TypeScript
• Cloud Run
• Google Cloud

Build tool-calling agents whose tools are read-only and grounded in your real datastore, so the model explains and recommends from tool output instead of memory, and route per role to the cheapest adequate model across vendors, cheap models for lookups, stronger ones for judgment, with the cost table written down. Keep every mutating action behind a human-approval gate and block destructive tools by default; harden the endpoint by treating tool output as data not instructions, whitelist-validating any user input that flows into a query, isolating sessions, fetching secrets at runtime, and pinning inference to an approved region.

• Python
• Go
• Google ADK
• Vertex AI
• Google Cloud
• Secret Manager

Put the estate under infrastructure as code and make the repository the system of record: modules for the shapes you repeat, a pull request as the unit of change with its plan attached for review, and reconciliation from version control so drift shows up rather than gets discovered. Tenancy and address allocation become things the code hands out instead of a spreadsheet somebody owns.

• Terraform
• Pulumi
• Atlantis
• ArgoCD
• GitHub Actions

Move the pipeline onto Kubernetes-native tasks with runners on your own cluster, so capacity is a decision rather than a queue. Give every pull request a preview environment torn down with it, and move the checks that actually catch things, schema compatibility and contract tests, into the path to merge instead of after it.

• Tekton
• Knative
• GitHub Actions
• Kubernetes
• Helm

Standardise the telemetry: one set of conventions across metrics, logs and traces, and service level objectives written as symptoms a user would notice, so the page a person gets is one they can act on. Then score every service against a maturity rubric mined from Git, CI and the telemetry itself, so the gaps are a list with owners rather than an impression.

• Prometheus
• Grafana
• Datadog
• OpenTelemetry
• BigQuery

Inventory what is actually running before anything moves, then land the target as code so the new estate is reproducible from its first day rather than its second year. Consolidate hypervisors, lift what lifts cleanly, rebuild what does not, and keep both sides serving until traffic has moved rather than until a date has passed.

• Terraform
• Pulumi
• Azure
• Google Cloud
• KVM
• OpenStack

Write the baseline as code and bring hosts to it in waves rather than all at once, with provisioning automated from bare metal upward so a rebuild is routine instead of an event. What is deployed and what is in version control stay the same thing, and the difference between two hosts becomes a diff somebody can read.

• Ansible
• Puppet
• Packer
• PXE
• Linux

Rebuild the address plan with allocation automated rather than requested, and put public and internal zones under version control so every record has an author and a history. Delegation, naming and labelling become conventions the tooling applies instead of documents people are asked to remember, and egress, NAT and the edge rules get the same treatment.

• Cloud DNS
• BIND
• IPAM
• Shared VPC
• Terraform