Available for contract work

AI systems that survive production

Your AI feature works in testing. Then real traffic arrives and it retries a request and charges twice, hangs with no deadline, loops without a ceiling, or quietly runs up a bill nobody capped.

Send me one of those. Within 48 hours you get a written diagnosis: what is happening, why, what it costs you, and what the fix involves. Then the fix, quoted after the diagnosis, with a test that fails without it.

Written diagnosis in 48 hours — $250
Paid on delivery · refunded if I can't reproduce it · fix quoted after, typically $600–1,200

What actually breaks

Not model quality. The plumbing around it — the same failure classes as any distributed system, wearing an AI hat.

CRITICAL
Silent regressionA prompt or model change quietly degrades output and nobody knows until users complain. Now the dominant cause of production LLM incidents.
CRITICAL
Retry double-effectsThe same request arrives twice and something happens twice — a charge, an email, a credit deducted.
CRITICAL
Uncapped spendNo ceiling per user or per session. One loop, one bad actor, and the bill is four figures by morning.
HIGH
No deadline on provider callsThe model takes 60 seconds, the worker is tied up, and under load the pool exhausts and everything stalls.
HIGH
No fallbackProvider rate-limits or goes down — and it does — and the feature simply breaks instead of degrading.
HIGH
Unbounded agent loopsTool calls tool, model re-plans, forever. Cost and latency both without a ceiling.
HIGH
Half-written stateProcess dies mid-operation. Paid but not fulfilled, charged but not delivered, stuck with no way to recover.
HIGH
Truncated output saved as completeConnection drops mid-stream and the partial answer is stored as if it finished.

How it works

  1. Written diagnosis — $250, within 48 hoursYou send the failing case: a workflow export, a repo, a log, a description of what happened. I reproduce it and send a written finding — what is happening, why, what it costs you if it keeps happening, and what fixing it involves. You own the document either way. If I can't reproduce it, I say so and refund it.
  2. The fix — quoted after the diagnosis, typically $600–1,200A bounded repair with a regression test that fails without it. Never quoted before the fault is reproduced, because anyone who quotes a repair before reproducing the fault is guessing at your expense.
  3. Sprint — $1,500–3,000When one bug turns out to be a class of them. Scope written down before I start; everything ships with tests.
  4. Stay — fractional, ongoingFor teams shipping AI features faster than they can make them reliable. I own that part so your engineers don't context-switch into it.

Proof, not adjectives

Everything below is public and readable. Judge the work rather than the claims.

The bug I'm most known for is one I wrote myself — and caught before it shipped. A lease that passed 78 tests and was still wrong: a provider call outliving its two-minute lease would have written its failure over a completed order, hiding a paid-for product and re-opening the order for a third charge. Every test settled an order from its current owner, so none covered a write from a superseded one. Found in cross-model review, reproduced in a test, fixed before it ever ran in production.
Writing · new

Retry-after-crash: the second purchase

A handler that is idempotent on paper buys twice when the process dies between the provider returning and the record being written. The window is milliseconds wide. The reproduction, the two-part fix, and five checks.

Article · 14 Sept 2026 →
Writing

The webhook that arrived before the one it depended on

Stripe does not promise to deliver events in order. A handler that decides from the event's type ships goods for payments that have not settled, and ships them again when the payment does. Reproduced, fixed, and five checks for your own handler.

Article · 14 Sept 2026 →
Writing

A lease is not a fence

How a Stripe fulfilment handler passed 78 tests and would still have charged one customer three times. The bug, why the tests missed it, the fix, and the general lesson for any lock or lease.

Article · 14 Sept 2026 →
Open source · new

second-run

Fires the failures that only show up on run number two at your webhook handler — duplicate deliveries, crashes before and after the purchase, a late write after a lease expired, out-of-order events — and reports what it actually did. Emits a regression test you keep.

Five scenarios · 20 tests · zero dependencies · MIT →
Confirmed by another contributor

circlefin/arc-node #361

A panicking task bypasses the new SIGTERM handover, costing the exit code, the drain window and teardown. An outside contributor re-derived it independently and wrote that it held. I retracted two of my own claims in the same thread when measurement said I was wrong.

Rust · Sept 2026 →
Confirmed by the project

agentscope-java #3059

Narrowed a reported bug to the one middleware that still blocks stream completion and showed the other two no longer reproduce on main. The project's collaborator reached the same split three days later.

Java · Sept 2026 →
Case study

How 78 tests missed a fencing bug

The failure, why the test suite couldn't see it, the fix, and the general lesson for any lock or lease.

Full write-up →
Open source

stripe-fulfilment-kit

Fenced, leased order claims that survive retries, crashes and concurrent webhook deliveries. Cross-process atomic.

59 tests · offline · MIT →
Open source

ai-review-gate

Two models review a coding agent's output and block the turn if it's wrong, forcing a correction. Includes an honest record of the eight real errors it caught.

Guardrails for agents · MIT →
Merged upstream

changedetection.io #4390

Their path-containment guard had no test; disabling it left every existing test passing. The new test is the only one that fails when the guard is removed. Merged into master by the project owner.

33k stars · Sept 2026 →
More

github.com/GG5533

Everything else, including the quant work.

Profile →

The checklist I audit against

Free, no signup, no email capture. Ten failure modes with how to check each one in your own codebase. Most people won't run it — but you'll know whether you have a problem before you talk to anyone about it.

Free resource

10 ways your AI feature breaks in production

The full audit method, given away. Silent regression, retry double-effects, uncapped spend, missing deadlines, unbounded agent loops, half-written state.

Read it →

Worth knowing before you email

If I don't think you have a problem worth paying to fix, I'll tell you and you'll have spent nothing. The diagnosis comes first and is priced as the two-to-three-hour job it is, because it should be an easy decision — and because you should be able to judge the work on one small piece of it before trusting me with anything larger. If I can't reproduce your bug, I refund the deposit and send you what I ruled out.

Written diagnosis in 48 hours — $250
Or just describe what's breaking. shabbal1@charlotte.edu · Already sure? Pay for the diagnosis and reply to the receipt with your materials.