David Manufor

A multi-tenant platform that tracks clause-level changes across contracts and privacy policies. A 12-service Turborepo monorepo moves scraping, diffing and clause analysis off the request path onto independently deployed Pub/Sub workers, so a single failing stage cannot halt processing and each stage scales on its own.

• ▸Architected a 12-service Turborepo monorepo — REST API, web application, marketing site and nine independently deployed Pub/Sub workers — moving a nine-minute scrape, diff and clause-analysis pipeline off the public request path so a single failing stage cannot halt processing and each stage scales independently.
• ▸Enforced tenant isolation in PostgreSQL through row-level security and a Prisma $allModels extension that applies the tenant predicate automatically, eliminating cross-tenant exposure from omitted WHERE clauses.
• ▸Built the retrieval-augmented generation pipeline on pgvector and Vertex AI embeddings, grounding clause extraction in each tenant's own policy baseline, with confidence scoring and fallbacks for malformed model output.
• ▸Provisioned 55 GCP resources as modular Terraform and moved schema migrations out of container startup into a Terraform-managed Cloud Run Job, eliminating cold-start races on deploy.
• ▸Maintained 134 automated tests across TypeScript and Python services, alongside a product requirements document, architecture design document and API specification.

An end-to-end encrypted file transfer and file-request platform. Files are encrypted with OpenPGP in the browser before upload, authentication uses Secure Remote Password so the server never receives the password or a hash of it, and a Web Worker pool streams ciphertext in chunks to support multi-gigabyte transfers without exhausting browser memory.

• ▸Implemented client-side OpenPGP encryption across a Web Worker pool sized to available CPU cores, streaming ciphertext in 64 KB chunks to support files up to 10 GB without blocking the main thread or exhausting browser memory.
• ▸Implemented Secure Remote Password authentication so the server receives only a cryptographic proof of the password rather than the password or a hash of it, and added PGP public-key sharing so file keys never reach the server.
• ▸Implemented encrypted peer-to-peer transfers using WebRTC and a custom signaling server.
• ▸Built a 101-endpoint Express and Prisma API across 14 data models, hardened with Redis-backed rate limiting that holds across instances and short-lived signed CloudFront URLs for download authorisation.
• ▸Provisioned 41 AWS resources as Terraform and validated authentication and transfer flows with Playwright end-to-end tests in CI.

A five-service system that ingests live stream audio, scores segments for virality with an LLM, and clips and transcodes the results to vertical video. An Express and TypeScript API gateway fronts Python services, connected asynchronously over Pub/Sub and Kinesis.

• ▸Built a five-service microservices system with an Express and TypeScript API gateway (REST and WebSocket) fronting Python services for audio ingestion, AI analysis and video processing.
• ▸Connected services asynchronously over Pub/Sub and Kinesis, running the stream monitor on GKE and clip and transcode jobs on Cloud Run.
• ▸Integrated Twitch, Deepgram, TikTok and X APIs, and authored the deployment runbook, API documentation and GCP IAM setup guide.

An open-source Python library for composing and versioning reusable LLM prompt templates. Prompts live in YAML with per-model variants, recursive includes and environment substitution, backed by a CLI that validates a whole prompt directory. Published on PyPI under MIT.

• ▸Published and maintain an MIT-licensed library for composing and versioning reusable prompt templates, through four releases under semantic versioning with 85% test coverage and support for Python 3.9+.
• ▸Designed a YAML prompt registry that resolves model-tagged variants (gpt-4, claude-3, llama-3) from a single key, so swapping providers never means rewriting call sites.
• ▸Implemented recursive template composition via {include}, environment substitution via {env:VAR}, and an LRU resolution cache that keeps deeply nested templates constant-time after first access.
• ▸Shipped a ptm CLI whose validate command catches syntax errors, type errors and circular includes across an entire prompt directory before they reach production.