Notes
Work with me
Products and AI
MVP development for AI and fintech startupsMVP development by one senior product builder with AI: a working first version in week one, security from day one, sourced costs and red flags.
Fractional CPO and forward deployed engineerHire a fractional CPO who also builds: product leadership and hands-on AI and fintech builds for startups and product teams, one to four days a week.
AI consultant who ships: strategy to productionHire an AI consultant who builds: I assess the problem, prototype in days and ship to production with guardrails. Proof, red flags and market rates.
AI agent security: what each agent can touch, provenAI agent security for security leads: a map of what each agent can and cannot touch, a person approving risky actions, an audit record and injection tests.
AI customer service that hands over when it does not knowAI customer service for support heads: answers only from your help content, says when it does not know, hands to a person with the details, and is measured on CSAT.
Web application security audit for AI-built appsA web application security audit for AI-built apps: I check data rules, keys, sign-in, payments and agent permissions, fix what I find and retest.
3D and real-time
AI property guide for off-plan homes in EgyptBuyers walk an off-plan villa, twin house, townhouse, apartment or chalet in 3D, ask anything in English or Egyptian Arabic, and hear the answer while the home shows it.
3D sales tools for real estate developers, from BIMInteractive site plans, floor plans, an apartment view simulator and sun studies built from your BIM, for off-plan sales. Try the live sample tower.
Industrial website design and 3D product animationIndustrial website design, 3D animation and rendering for manufacturers and distributors: films, interactive 3D, AR and bilingual product pages.
Medical device 3D animation and interactive trainingMedical device 3D animation, mechanism of action films and interactive IFU training built from your CAD. Try a 3D pump you can load, prime and run.
Interactive trade show displays and 3D product demosInteractive trade show displays: booth screens that react as visitors walk past, touch kiosks, AR take-home models and lead scoring. Try the kiosk demo.
Safety training simulation that proves who passedInteractive safety and equipment training: trainees work real 3D equipment in a browser or headset, get scored, and earn a credential a supervisor can verify.
3D web experiences: stores, configurators, gamesI build 3D web experiences that open from a link: virtual stores, product configurators, browser games and digital twins, in three.js or Unity.
Fintech
Fintech app development for banks and insurersBanking, payments and insurance apps where every move of money passes rules you control: KYC, sanctions, limits, human approval. Try a working sandbox bank.
Stablecoin pilot for banks and payments teamsA small, paid stablecoin pilot for banks: one use, low limits, next to your core and ERP, every step mapped to the GENIUS Act. Compare settlement with SWIFT.
Local businesses
Online booking and Wallet loyalty cardsI build online booking with Apple and Google Wallet stamp cards for local service businesses, from car washes to dog clubs. No app for customers to download.
AI receptionist for small businessesI set up AI receptionists for small businesses: it says it is an AI, books the job into your diary, texts a summary, and never promises what you cannot deliver.
All notes
438 min read3D product animation for industrial equipment: films, interactive 3D, AR and a website that sells3D product animation for industrial equipment shows how a unit works inside. One model gives you the films, a 3D viewer, AR and stills for every product page.
426 min readHow much does a 3D virtual tour cost? 360 photo, scanned and real-time 3D comparedA 360 photo tour costs a $550 camera and free software, a scanned 3D tour about $319 a home, and a walkable real-time 3D tour is quoted per project.
417 min readVibe coding: what it is, where it breaks, and how to ship it safelyVibe coding is building software by prompting an AI and accepting its code. It is great for prototypes; here is how to get one safely to production.
407 min readHow to tokenize real estate: the company, the token and the rent, step by stepPut the property in its own company, issue that company's shares as tokens that check every buyer, and pay the rent out to holders each month.
397 min readWhat is a digital twin? The definition, how it works and real examplesA digital twin is a virtual copy of a real thing kept in step with it by live data, so you can watch, test and plan on the copy before touching the real one.
387 min readSupabase security checklist: the settings that leak your data, and how to fix each oneSupabase leaks data when RLS is off, a policy says using (true), a secret key ships to the browser or a view skips RLS. 12 fixes with SQL.
377 min readCan a bank issue its own stablecoin? How a community bank launches one, step by stepYes. Under the GENIUS Act a US bank can issue a stablecoin through an approved subsidiary, or partner, distribute or hold one. Here is how to start.
367 min readHow much does it cost to build an app? Where the money goes, and what AI changesOn Clutch, app projects most often cost $10,000 to $49,999 and average $90,780. Here is where the money goes and what building with AI changes.
357 min readThree.js website: what three.js is, what you need to build a 3D site, and what it coststhree.js is a free, MIT-licensed JavaScript library that draws 3D in a web page. A 3D site needs a scene, a camera, a renderer, lights and glTF models.
347 min readAI chatbot for your website: build or buy, what it costs, and how it learns your contentAdd an AI chatbot to your website three ways: a help desk widget, a no-code builder, or a custom bot on a model API. Prices checked at the source.
339 min readHow to migrate from Firebase to Supabase without logging out a single userImport Firebase users with their scrypt password hashes, reshape Firestore into tables, copy Storage, turn on RLS, then cut over with a freeze or dual-write.
327 min readHow much does a fractional CTO cost? UK, US and Gulf rates, and when full time is cheaperFractional CTOs and CPOs charge about £1,200 to £3,000 a day in the UK and $1,500 to $4,000 in the US. Past 2 to 3 days a week, full time can cost less.
3110 min readHow to prove you’re over 18 without showing your IDLet someone you trust check your ID once, then show each website one signed answer, "over 18: yes", or a zero-knowledge proof of it. Nothing else.
308 min readUnity WebGL on mobile: how I took a 650 MB model to a 74 MB build at 60 fpsUnity WebGL builds are big and slow on phones because of triangles, textures, live lights, draw calls and code. Fix those, then Brotli and headers.
298 min readAI agent governance: a practical framework for securing agents and their permissionsAI agent governance means every agent has an owner, its own identity, least privilege, a check before each action and a record you can prove.
287 min readMCP security checklist: 12 checks before you connect an AI agent to your toolsMCP is safe when you pin servers, scope tokens, approve risky actions and limit what servers can reach. The 12 checks I run, ranked by risk.
278 min readMCP server: what it is, what it exposes, and how to build oneAn MCP server is a small program that gives AI agents tools, data and prompts over one standard protocol. Here is how to build, connect and ship one.
267 min readHow to build a fan engagement platform: points, games, rewards and fan data the artist ownsA fan engagement platform gives fans a reason to come back every day and earns one consented data point per screen, so the artist owns the fan list.
257 min readVibe coding security checklist: 13 checks a founder can run in an afternoonVibe coding is safe to ship once you check 13 things: secrets, auth and RLS, input, rate limits, dependencies, keys, uploads, backups and the agent.
248 min readCross-border payments with stablecoins: how they work, what they cost, and when they beat SWIFTA partner turns your money into a dollar stablecoin, it crosses a chain in minutes, a second partner pays out locally. Faster than SWIFT, not always cheaper.
237 min readLow latency streaming: why your live stream is delayed, and how to cut itLive streams run 10 to 30 seconds behind because players hold whole segments. LL-HLS and LL-DASH cut that to TV's range; WebRTC to under a second.
227 min readYour AI coding agent can delete your database. Here’s how to stop it.Any AI coding agent with a shell and your keys can delete files or a database. Deny rules, a read-only user, backups and a guard that asks first stop it.
217 min read"Online Safety Act: does it apply to your site, and what you must do"If UK users can use your service and people can post, message or search on it, or you publish porn, the Online Safety Act applies, wherever you're based.
208 min read"Verifiable credentials: what they are, how they work, and how to build one"A verifiable credential is a digital licence, diploma or ID signed by whoever issued it, so anyone can check it in seconds without calling the issuer.
197 min readAgentic AI: what it is, what it costs to run, and how to ship one safelyAgentic AI is software that plans, uses tools, checks the result and repeats until a task is done. What it costs, where it fails, how to ship it safely.
187 min readAI receptionist: what an AI voice agent does on your phone line, what it costs, and what it must never doAn AI receptionist answers your phone, books and moves appointments, takes messages and hands urgent calls to a person. Costs, risks and setup.
177 min readHow to accept InstaPay on your website and confirm payments automaticallyGive each order an exact amount, forward your bank's incoming-transfer texts to a matcher, and mark the order paid when the amount and a second sign agree.
167 min readWhat is a zero-knowledge proof? Explained simply, with a game you can playA zero-knowledge proof convinces a checker that something is true while showing nothing else: they learn "true" and not why. Play one here.
157 min readSuperSplat tutorial: how to clean, crop and publish a 3D scanSuperSplat is a free, open-source splat editor from PlayCanvas in your browser. Open a scan, delete floaters, crop, export .spz, publish.
148 min readGaussian splatting on a website: how to put a 3D scan on your siteA Gaussian splat is a photo-real 3D scan made of soft blobs. Capture it with a phone, export .spz, and show it on your site with Spark and three.js.
138 min readAI customer service agent: what it can safely do, and what it costsAn AI customer service agent answers from your help centre and hands the rest to a person. Start it read-only, write the articles first, pay per resolution.
127 min readWedding photo sharing with a QR code: how to collect every guest’s photosPut one QR code on every table that opens the camera in the guest's browser. With no app to download, more guests join and every photo lands in one album.
117 min readHow much does a digital twin cost? Build, run and payback, line by lineA building digital twin costs about $32,000 to $200,000 to build and $750 to $1,100 a month to run, set by the model, the sensors and the platform.
107 min readWhat is an AI agent? The parts, real examples, and the one ruleAn AI agent is an AI model given a job, tools and a loop so it can act for you. Its parts, everyday examples, and why its tools set what it can break.
0911 min readHow to put a loyalty stamp card in Apple and Google Wallet, and pair it with online bookingA Wallet stamp card is a pass customers add from a link, with no app. After each visit your server updates it and the phone shows the new stamp.
087 min readHow much does a small business website cost in 2026? Three routes, priced from the sourceA small business website costs $17 to $29 a month on a builder, most often $1,500 to $5,000 from a freelancer, and $1,000 to $50,000 from an agency.
077 min readWhat is a stablecoin? How the peg holds, the types, and why some brokeA stablecoin is a token built to stay worth one dollar: the issuer holds cash and Treasury bills behind every coin and buys coins back on demand.
067 min readHow much does it cost to live stream an event?A phone stream needs about $174 of kit, three cameras about $517 to hire for three days, and a crewed day adds crew from £1,780. Prices sourced.
0511 min readForward deployed engineer: four AI and fintech builds, from first call to productionWhat a forward deployed engineer does, shown through four real AI and fintech builds: agent guardrails, credentials, bank money and tokenised homes.
0416 min readHow live TV and streaming work: broadcast workflows from tape to the cloudHow live TV and streaming work, from camera to cloud to your phone. Why streams lag the TV, and how broadcast workflows moved from tape to files to AI.
0328 min readHow to prove who someone is without seeing who they areHow I built private identity three times: a zero-knowledge player ID, a game login on Holochain, and a licence nurses share without their whole file.
0214 min readVirtual stores, live shows and 3D worlds people actually useHow to build a 3D virtual store, a virtual concert and a digital twin that open in a browser, and how to get 1,000 people into one virtual event.
014 min readCan one person with AI do a whole team’s work? What live systems taught meCan one person with AI do a whole team’s work? What 20 years of live systems taught me, and what happened when I built and shipped an app alone with AI.