// Featured Projects

An automated code grading system that runs student submissions in isolated sandboxes and uses AI to generate test cases directly from PDF assessment papers.

• —Engineered a high-performance Java grading engine utilizing a multi-threaded ExecutorService and disposable Docker containers with strict CPU/Memory limits and disabled networking for secure, isolated code execution.
• —Developed an AI-assisted test generation pipeline using local Ollama with NDJSON log streaming to automatically derive unit testers from PDF question paper, reducing manual assessment overhead by 90%.
• —Built a Next.js dashboard featuring real-time log streaming, automated gradebook generation (CSV), and an interactive score display with granular failure tooltips for compilation and runtime errors.
• —Optimized large-scale grading performance through parallel student processing, achieving a 60% reduction in total assessment time.

An AI-powered flashcard generator for studying any topic with automatic fallback across 8 AI models to guarantee availability and consistent output quality.

• —Engineered an AI generation engine using Next.js Server Actions with an automatic 8-model fallback hierarchy (Gemini 3.1 → 3.0 → 2.x → 1.5) and native JSON structured outputs with Zod schema validation to ensure 100% schema compliance and system availability.
• —Implemented a secure authentication and session management architecture using better-auth with Email OTP and Google OAuth, with decks stored as JSONB columns in Supabase for flexible schema evolution without migrations.
• —Designed a unified type-safe data layer with Drizzle ORM and Supabase RLS, maintaining end-to-end type integrity across the monorepo from the schema to the form layer.

A hyperlocal discovery platform connecting Singapore residents with small businesses through interactive maps, vendor storefronts, and community reviews.

• —Built a hyperlocal business discovery platform for Singapore's small businesses, featuring interactive maps (Google Maps + OneMap API), vendor storefronts, community reviews, and a referral rewards system.
• —Architected a pnpm monorepo with a shared types layer across frontend and server, migrating the stack from PHP → Express.js/Node.js → Hono/Bun for end-to-end type safety and significantly improved cold-start performance.
• —Integrated better-auth for Google OAuth and email/password flows, with Upstash Redis for session caching and QStash for transactional email queue processing.

Multi-cloud infrastructure for a healthcare enterprise's core software suite, deployed across Azure and Google Cloud with automated observability and zero-trust security.

• —Longlisted for the SMU-Dell Cloud Native Award.
• —Developed a multi-cloud hybrid topology using Terraform, anchoring enterprise compute (Moodle, Odoo, Peppermint) on Azure Container Apps with traffic routed through a GCP Global Edge layer (GLB + Internet NEGs) for the Singapore region.
• —Engineered an automated E2E observability pipeline utilizing Playwright and Azure Container App Jobs to verify critical healthcare flows on a 10-minute cadence, with automated Sentry/Pino reporting and Supabase screenshot capture.
• —Implemented a Zero-Trust security model using Azure Managed Identities and GitHub OIDC for keyless deployments, complemented by a zero-manual-secret policy where Terraform auto-populates all secrets into Azure Key Vault.
• —Optimized operational expenditure by 40% through consumption-based scaling and intelligent Azure Function-driven resource lifecycle management.

A municipal operations platform for managing contractor dispatch, SLA monitoring, and case escalation across city services.

• —Designed a strict Atomic/Composite SOA across 17 services (8 atoms, 6 composites, 3 role-specific frontends) where each atom owns exactly one domain schema and composites are stateless AMQP-driven orchestrators with no persistent storage — integrating OutSystems Cloud as an external Contractor atom for vendor data.
• —Implemented SLA breach detection using RabbitMQ topic exchange with TTL Dead Letter Queues
• —Secured service-to-service communication with better-auth RS256 JWT and JWKS validation, using Hono typed RPC clients (`hc<T>`) for end-to-end type safety across all inter-service HTTP calls.