Production AI Engineer
AI now runs inside the product and shapes how it gets built. Both have to clear the same bar: reliable under load, secure as it grows, and not expensive by accident.
Tools I work with: Claude Code, Cursor, Lovable, Bolt, Replit, Bubble.io, n8n, Supabase, and Vercel.
Anish Gandhi
Production AI Engineer
[01]Selected work
Nine case studies in all. These three carry the clearest evidence. A rescue that held through a platform-level security disclosure, a performance brief that could not trade against pixel accuracy, and a compliance product that has been live since 2024.
I took over an AI-generated operations dashboard on Upwork. The brief was two sentences: we are onboarding live users, get the product ready. In the prep I found 73 bugs in the original build and closed every one. Six weeks later the app was stable, the Chrome extension was in the Web Store, and the project had survived its first platform-wide BOLA disclosure.
A second product for a client I had already led for seventeen months. The brief paired a pixel-perfect Figma implementation with a hard workload-units ceiling on Bubble.io, two things that usually trade against each other. Live at sharetalent.co with a discovery feed, a talent directory, a jobs surface, and an agentic resume import that goes through a human review gate before any write.
Hired solo to build the V1 compliance MVP in 2024, brought back for the V2 full-product extension in 2025, and V3 is in development. V2 added partner sub-apps for white-label distribution, usage-based licensing, generated compliance documents, an integration that drafts regulatory language from plain answers, an audit-log surface, and field-level version comparison.
[02]What I take on
Each one has a page of its own, with the shipped work behind it.
[01]
An AI-built app that ships in the demo and falls over under real load. I audit it, close the defects, and take it to live users. Agency Hub is the named case study. 73 bugs closed, and a platform-level BOLA disclosure survived while the product stayed up.
Read about vibe code cleanup[02]
Regulated software with audit-log integrity, tenant isolation at the data layer, immutability, consent surfaces, and regulatory-language drafting. GoBD V1, V2 and V3 plus GDPR, shipped live since 2024 on the same product. The engineering discipline transfers to HIPAA and SOC 2 paired with framework-certified advisory.
Read about compliance software[03]
Supply-and-demand matching, bid flows, ratings and reputation, dispute handling, Stripe Connect escrow. ShareTalent as lead developer for 17 months, Construction Marketplace across three sprints with zero bugs, and FoodIWant from one vertical to six in seven months.
Read about marketplace work[04]
Row-level security at the data type, schema-first tenant boundaries, role hierarchies that keep working as the org chart grows, reporting that holds at 120k+ rows, and white-label sub-app distribution for partner channels. GoBD and HR Portal are the case studies.
Read about multi-tenant workAlso on the bench
Code-first builds in Claude Code, Lovable and Cursor. Focused web tools, internal apps, and anything where code is the right call.
Agents that take action, wired into your app, your data and your existing workflows, with a review seam before anything writes.
MVPs, client portals, dashboards and internal tools. Modular architecture, so the v1 does not need a rebuild when the product grows.
Flat-file imports into relational Postgres, and schema-to-schema moves between databases. Phased, with a verification gate per phase.
Connective tissue between your stack and everything else. Custom workflows, dispatcher-worker patterns, and execution caps handled.
Stripe, HubSpot, Salesforce, OAuth 2.0, email providers. If it has an API, it can connect to your app.
[03]What clients say
Anish is an excellent developer. He not only delivers timely work, but gives thoughtful feedback on everything related to the product. His knowledge, and ability to communicate, are top notch. You, your team, and your project would be lucky to have Anish involved in any capacity.
Also recently
[04]Recent writing
40 min
Step-by-step runbook to move a live app from Lovable to your own Supabase and Vercel, with rollback gates, real incidents, and fixes.
7 min
Store client secrets in Supabase Vault, keep searchable metadata in Postgres, and gate every decrypt behind one checked SECURITY DEFINER function. Step-by-step SQL with the gotchas.
6 min
The Chrome Web Store rejects re-uploads with the same manifest version. Catch the missed bump locally in a pre-commit hook; gate it again in CI.
