# Hamza Shah

> Software Developer, AI Systems & Cryptography Engineer based in Islamabad, Pakistan. Builds secure systems, privacy-first applications, distributed AI pipelines, blockchain infrastructure, and production-grade cryptography — from classical RSA/ECC/AES to post-quantum Kyber, Falcon-512, Dilithium, and NTRU.

## Portfolio resources

- [Portfolio home](https://hamza1s34.github.io/): Human-readable portfolio overview.
- [Canonical résumé](https://hamza1s34.github.io/resume.md): Full experience, skills, education, and contact information in Markdown.
- [Original résumé PDF](https://hamza1s34.github.io/Hamza_Shah_Resume.pdf): Source résumé.

## Key facts

- Name: Hamza Shah
- Location: Islamabad, ICT, Pakistan
- Email: hs.456.king@gmail.com
- Phone/WhatsApp: 0319 5787106
- Telegram: @Hamza1s34
- GitHub: https://github.com/Hamza1s34
- LinkedIn: https://www.linkedin.com/in/hamza1s34/
- Primary specialties: distributed AI systems and LLM orchestration, applied cryptography (RSA, ECC, AES, Kyber, Falcon-512, Dilithium, NTRU), blockchain architecture, Rust + Tor anonymous systems, full-stack development, mobile app development (React Native, Flutter), P2P networking, cloud deployment.

## Notable Projects

### Reevera
- URL: https://reevera.com
- Role: Founding Engineer & AI Systems Architect (2026 – Present)
- An end-to-end autonomous AI video production platform. An AI Director converts a creative idea into a fully planned, generated, inspected, assembled, and rendered cinematic video.
- Architecture: Modular-monolith TypeScript monorepo (npm workspaces) running isolated processes — api, sse, workers, scheduler — chosen to avoid microservice sprawl while keeping failure domains separate.
- Core design principle ("the LLM is not the database"): The AI Director only *proposes* commands (propose_scene, propose_shot, …). The backend treats every command as untrusted input, validates it against budgets, locks, and schemas, then commits to Postgres. The model never touches the database or storage directly.
- Distributed job queues: BullMQ + Redis with dedicated worker pools (director, media, inspect, render, scheduler). CPU-bound FFmpeg rendering is isolated onto its own host/process so render spikes never block the API.
- Real-time: Server-Sent Events over Redis Pub/Sub (chosen over WebSockets for unidirectional state), with monotonic event IDs and Last-Event-ID for automatic reconnection and state recovery.
- Financial safety: Double-entry credit ledger using PostgreSQL row-level locks (SELECT … FOR UPDATE) inside strict transactions, making balance deduction race-condition-free.
- Versioning: Immutable append-only version rows (*_versions) instead of in-place updates, enabling instant time-travel restore of any project state.
- Storage: Cloudflare R2 (S3-compatible) with short-lived presigned URLs for zero egress cost.
- Backend stack: Node.js 22+ (native ESM), Fastify v5, TypeBox for schema-first validation and types, Drizzle ORM + drizzle-kit, PostgreSQL 16+, Redis 7+.
- Auth & security: In-memory JWT access tokens (15 min) + HttpOnly rotated refresh cookies (30 days), Argon2id password hashing, Google OAuth2 (PKCE), Redis token-bucket rate limiting.
- Frontend: React 19 + TypeScript (strict), Vite 7, React Router v7, with a custom multi-track audio/video timeline, scene sequencing, aspect-ratio controls, and a streaming AI Director panel — no heavyweight UI libraries.
- AI providers: Provider-agnostic adapter layer for Google (Gemini, Imagen, Veo), ElevenLabs, OpenRouter, and Anthropic Claude, with backoff, circuit-breaking, and content-hash idempotency caching. Includes a prompt compiler with continuity tracking, character lock sheets, and style bibles.
- Infrastructure: Docker & Docker Compose, PM2 process management, Nginx reverse proxy (TLS termination; static/API/SSE routing), Lemon Squeezy for credits and subscriptions.

### Qbitcoin
- GitHub: https://github.com/Hamza1s34/Qbitcoin
- Role: Lead Blockchain Developer & Cryptography Engineer (Jan 2024 – Feb 2026)
- A quantum-resistant blockchain built in Python. Features a full-node implementation with a custom consensus engine, Merkle tree verification, and P2P peer discovery using Kademlia DHT.
- Security: Replaced ECDSA with Falcon-512 lattice-based post-quantum digital signatures. Full key-generation, signing, and verification pipeline.
- Interfaces: JSON-RPC and gRPC APIs for wallet integration, block explorer, and exchange connectivity.
- Clients: Desktop wallet, React Native mobile wallet, and blockchain explorer.

### Gumnam
- GitHub: https://github.com/Hamza1s34/Gumnam
- Role: Systems & Cryptography Engineer (2025 – Present)
- A serverless, Tor-based anonymous messenger built in Rust. Eliminates all reliance on centralized servers by routing all traffic over Tor hidden services.
- Encryption: End-to-end encrypted using Ed25519/X25519 ECIES + ChaCha20-Poly1305 + HKDF with signed protocol messages and strict reject-on-fail validation.
- Client: Cross-platform desktop application (Flutter/Dart) integrated with the Rust core via flutter_rust_bridge. Supports chat, media, reactions, pinning, and notifications.
- Resilience: Offline message delivery via embedded libp2p Kademlia DHT.

### MetaLLM
- URL: https://metallm.tech
- Role: Full Stack Developer & AI Engineer (2026 – Present)
- A multi-model AI aggregator platform that lets users interact with multiple AI models via smart routing, debate mode, direct mode, and multi-model querying.
- Routing: Intelligent layer that analyzes query complexity and dispatches to specialized models (reasoning, coding, creative, data analysis).
- Debate Mode: Multi-round debate system where models challenge each other's outputs, refined by a neutral AI judge.
- Stack: React + TypeScript (Vite, TanStack Query, shadcn/ui) frontend, Express.js/Node.js backend, PostgreSQL + Drizzle ORM, OIDC auth, fiat + crypto billing.
- Ships a live Android app with active subscribers.

For complete, canonical career information, use `resume.md`.