I’m Emmanuel M Shine, a technical product manager and product engineer in Bangalore. Someone describes a problem in a sentence, and I take it the whole way: the product thinking, the interface, the database beneath it, the payments and integrations, and the site that sells it. Six products so far, under Axilerate Technologies.
Who it is for and the loop they repeat every day, in a sentence. Scope is cut until that loop works the moment two people sign up.
Framework, backend, pricing and who pays, each with its reason, before any screen exists. The file stays in the repository and keeps growing.
Every screen is built on seed data behind one data module. The idea can be held and argued with before a backend is paid for.
Access, limits and money become policies, triggers and functions in Postgres, where a client cannot talk its way past them.
Payments, store billing, WhatsApp, push and file delivery, each connected through a server-side function with its secret kept off the device.
A live site, store builds, the policy pages a payment provider checks, and scripts that test the deployed system instead of trusting it.
Hover a product to trace what it runs on. Select it to open the project.
A badminton network for players, coaches, academies and venues. Find a game nearby, score it live, climb a rank nobody can type in, and buy kit from a venue’s store with the payment split straight to the shop.
payments for an order. Price and payee are looked up, never sent by the client.place_store_order, the only door. It takes products and quantities and nothing else.payments asks Postgres for the quote as the player. No amount the app sends is trusted.payments marks the order paid and a four-digit pickup code is issued.confirm_match_result() moves the counters. Rank is then derived on read by rank_for().booked_count, so two people cannot take the last place.transfers split, so the shop’s share lands in its own linked account on capture. Signatures are checked in the edge function and again by the webhook. Running on test keys while Route approval is pending.notify_url. One payments function opens whichever gateway the shop is linked to.The five rungs from Rookie to Smash Master are a pure function of games, hours, wins, win rate and verified skills. rankOf(profile) computes it in the app and rank_for(uid) does the same in Postgres. A stored column would be a second copy to keep in step, and the copy a client would try to edit. Because win rate can fall, a slipping player is demoted the moment the next result is confirmed, with no job to run.
Postgres Changes re-evaluates row-level security per subscriber per change, which fails well before five hundred people watch a final. Broadcast is plain pub/sub. The database stays the durable record and the channel is only delivery, so nothing exists solely in flight.
Every guard in the client repository is duplicated as a policy or trigger. The client copy exists so the app can explain a refusal in words. protect_profile_columns puts server-owned columns back on any client update, and trusted functions step past it with a transaction-local setting.
PostgREST reads every new row back with RETURNING, which is checked against the SELECT policy. A policy that looked the row up again could not see its own uncommitted row. The fix was a rule (a SELECT policy never looks up the row it is judging) and two checks: verify:db replays all migrations on an in-process Postgres in about two seconds, and verify:queries reads and writes against the live project.
Venues list new kit with a counter price and an optional lower app price. Stock is a number kept by trigger, variants carry their own stock, and an order is a header with lines frozen at the price on the day. Unpaid orders expire after an hour and give their stock back. Pickup is over the counter against a code, so nothing is shipped.
A marketplace that collects everything and pays vendors later is acting as a payment aggregator. So the split happens at the gateway: on a ₹900 order, ₹855 settles to the shop and ₹45 stays as a 5% commission, set in a fee_rates table with dated rows. Razorpay Route was built first, and Cashfree Easy Split was added on the same model when Route needed turnover a new company lacks. A row is marked paid only on the provider’s own word, checked by signature.
A claimed shot is verified by six yeses from six different players who were across the net in a confirmed match. One vote per player per claim means a friendly opponent played six times yields exactly one vote.
The editorial pages of India’s English and Hindi newspapers, split into clean per-paper PDFs every morning for UPSC and government-exam aspirants.
public/./today page that brings search traffic in.fast-xml-parser to build the free daily teaser.The engine extracts text per page with pdfjs, matches it against a keyword list per newspaper, and treats an unmatched page as a continuation of the last matched one. Scanned pages and unmapped font encodings come back unassigned, so the admin flow has a review step instead of a silent wrong split. Adding a paper is one entry in lib/newspapers.ts, and the engine and the interface both pick it up.
PDFs live in a private bucket and reach a reader only through an authenticated route that checks access per request. Each page is watermarked with the subscriber’s email, which makes forwarding into a public group traceable. Admin previews stay clean.
Uploads are documents from outside. pdfjs runs with isEvalSupported: false, so embedded font programs never reach eval(), closing off CVE-2024-4367.
Sign-up and password reset both run over WhatsApp OTP on the same approved template. Duplicate sign-ups are blocked before an OTP is spent, and when two accounts could claim a reset the phone holder wins deterministically.
Editions older than thirty days are removed along with their records, and master uploads are not hoarded after splitting. That one change reclaimed 2.3 GB.
Workouts, meals and progress kept in sync between a coach and their clients. For anyone without a coach, X-Guru writes the week on the device.
subscriptions, a table with no client write policy.is_pro() and the limit triggers decide every request from then on.subscriptions table, is_pro(). The database side is built and enforced; the store products are still to be created.expo-sensors, with a manual fallback where no sensor exists.The built-in coach is an ordinary trainer profile with a fixed id. Links, plans, meal review and points all flow through the tables and triggers that already existed, so there is no parallel path for trainees without a coach.
The planner picks from ten movements per muscle group and three meals per slot per diet, driven by a seed instead of randomness at call time. The same trainee and the same week produce the same plan, so reopening the app never rewrites what someone was told to do. It works offline and no request leaves the device.
Anyone can talk to PostgREST with the anon key, so a limit enforced only by a disabled button is decoration. The free-tier limits are triggers, is_pro() reads a table only a webhook can write, and the app reads entitlement purely to decide what to say.
Award triggers first fired on insert alone. Assigning is an upsert per trainee per day and X-Guru fills every day, so a coach taking a day over performed an update and earned nothing. The rule became: earn on a genuinely new plan, including one taken from another coach, and never for re-saving your own.
Multi-tenant invoicing for Indian small businesses. GST worked out correctly, an invoice that looks like the business made it, and a UPI code the client can pay from.
qrcode. Any UPI app can pay it and Folio is never in the money flow.An FNV-1a hash of the business name seeds a small xorshift generator, which sets the lobes and line count of a guilloché rosette drawn as SVG splines. It is deterministic, so the server render and the client render produce the same paths and nothing flickers on hydration.
Amounts are stored and computed in paise. Tax is worked out per line against the five GST slabs, then split by comparing the seller’s state code with the place of supply.
A sent invoice cannot be edited. Corrections are credit notes, and numbering is sequential per financial year with no gaps, which is what an auditor expects to find.
Collecting payments on a business’s behalf needs a payment-aggregator licence. Folio shows the business’s own UPI id as a QR and records a manual mark-as-paid, so funds never touch the platform.
The interface is specified as security paper, intaglio ink and a thread colour, in a DESIGN.md of named tokens. Six ink colours let a business tint its invoices without leaving the system.
Upload a resume once. Jobed finds live openings that fit, then writes a tailored resume, cover letter and interview prep document for each one.
Search-indexed postings decay within a day. Every result is fetched before it is saved, and a second search pass fills the gaps, listing the dead URLs so they are not offered again.
Greenhouse, Lever and Workday sit behind Cloudflare and refuse server requests even for live postings. isUrlAlive therefore marks a job dead only on an explicit 404 or 410, or on LinkedIn’s redirect away from a closed listing. Everything else is treated as alive.
The model sometimes answers apply_url, url or link in place of applyUrl. One function accepts every known alias, drops entries without a valid https address, and logs what it dropped.
The second pass runs inside a Promise.race against 90 seconds and returns what the first pass found if it loses. A stale database connection after a long call is handled by recreating the search row and retrying the insert once.
Each plan fixes how many jobs are found and how often, and generated documents are cached per job. The cadence a user sees is the same control that bounds model spend.
The site for Axilerate Technologies, the studio these products ship under. Services, products, team and a contact path, in light and dark.
The hero draws a particle network on a single canvas behind the headline, with spring-staggered entrances from Framer Motion on top. Everything below it is static HTML.
Buttons, badges and cards are small variant-driven primitives built on Radix Slot and class-variance-authority, so ten routes share one vocabulary.
The sitemap, robots file and Open Graph image come from route files, so a new page cannot ship without them.