alpha-engineer

Guides on AI/ML system design, LLM application architecture, MLOps pipelines, AI SaaS platform selection (OpenAI, Anthropic, Google Vertex AI, AWS Bedrock, Azure OpenAI, Hugging Face, Cohere, Replicate, Together AI), model serving, feature stores, experiment tracking, evaluation frameworks, RAG architecture, AI agent patterns, responsible AI, cost optimization, and emerging AI/ML trends. Use when designing AI systems, selecting AI providers, building LLM applications, setting up MLOps, or evaluating AI architecture patterns.

AI/LLM integration patterns: Anthropic SDK streaming with TypeScript, RAG architecture (chunking, embedding, vector search with pgvector), tool use / function calling, model selection guide (Haiku 4.5 vs Sonnet 5 vs Opus 4.8), prompt caching, structured output with Zod, token cost management. Use when building AI features, RAG pipelines, AI agents.

Flutter 3.27+ patterns — Riverpod 2 state with codegen, GoRouter 14+ navigation, Impeller rendering (default on all platforms), WASM web, extension types, on-device AI (firebase_ai, MediaPipe), Patrol 3.x testing, platform channels, performance

Expert guidance on Flutter 3.27+ (Impeller default on all platforms, Material 3, WASM web, DevTools, Flame), Dart 3.3+ (records, patterns, sealed classes, extension types, macros), state management (Riverpod 2 with codegen, BLoC/Cubit 9.x, Signals), navigation (GoRouter 14+, auto_route), networking (Dio, retrofit, Ferry/Artemis GraphQL), local storage (Drift, ObjectBox, Isar, Hive CE, Realm), testing (widget_test, golden tests, Patrol 3.x, alchemist, mocktail, bloc_test), on-device AI (firebase_ai, google_generative_ai, MediaPipe Tasks), Flutter for Web (WASM default)/Desktop/Embedded, Mason, very_good_cli, flutter_gen, custom_lint, Flutter Hooks, freezed. Use when building or optimizing Flutter apps.

Designs CI/CD pipelines with build, test, and deploy stages, blue-green/canary/rolling deployments, feature flags, artifact management, and environment promotion strategies. Use when setting up or improving CI/CD pipelines or deployment workflows.

Designs REST, GraphQL, gRPC, tRPC, WebSocket, SSE, and AsyncAPI/event-driven APIs. Covers OpenAPI 3.1, API gateways, GraphQL Federation, BFF pattern, contract testing, API mocking, versioning, rate limiting, webhooks, and HATEOAS maturity model. Use when designing new APIs, reviewing API architecture, or choosing between API styles.

Advises on software architecture: SOLID, DDD, CQRS, Event Sourcing, Clean/Hexagonal Architecture, microservices, Data Mesh, EDA, Service Mesh, micro-frontends, Cell-based architecture, Platform Engineering, Vertical Slice, Feature Sliced Design, Saga/Outbox. Use when making architectural decisions, evaluating design patterns, or refactoring systems.

Guides on cloud services: AWS, GCP, Azure service selection, multi-cloud strategies, serverless vs container trade-offs, managed vs self-hosted decisions, and cost optimization. Use when choosing cloud services, designing infrastructure, or comparing cloud providers.

Performs code reviews against quality criteria: readability, maintainability, correctness, security, performance, test coverage, naming conventions, and documentation. Use when reviewing pull requests, auditing code quality, or establishing review standards.

Advises on database selection, schema design, indexing, query optimization, and migration. Covers SQL, NoSQL, Graph, Columnar, Key-Value, Time Series, NewSQL, Vector, Serverless, Data Warehouse, Embedded, Multi-Model, Streaming, and Decentralized databases. 100+ database technologies including PostgreSQL, MySQL, MongoDB, Redis, Kafka, Neo4j, Cassandra, ClickHouse, DynamoDB, CockroachDB, Pinecone, Snowflake, and ORMs (Prisma, Drizzle, SQLAlchemy, GORM, Diesel, EF Core, Hibernate). Use when selecting databases, designing schemas, optimizing queries, or planning migrations.

Sets up observability: structured logging, metrics collection, distributed tracing, alerting rules, dashboard design, SLI/SLO/SLA definition. Covers ELK, Prometheus, Grafana, Datadog, OpenTelemetry. Use when implementing monitoring, debugging production issues, or designing observability architecture.

Guides on performance including profiling (CPU, memory, I/O), caching layers (CDN, application, database), connection pooling, lazy loading, code splitting, database query optimization, and load balancing. Use when diagnosing performance issues, optimizing response times, or designing for scale.

Guides on application security: OWASP Top 10, authentication/authorization patterns (OAuth2/OIDC/JWT/RBAC/ABAC/ReBAC), encryption, passkeys/WebAuthn/FIDO2, Zero Trust, SAST/DAST/SCA scanning, WAF, SIEM, supply chain security, compliance frameworks. Use when implementing authentication, handling sensitive data, reviewing security posture, or designing secure architectures.

Provides testing strategies including test pyramid, TDD/BDD, unit/integration/E2E patterns, mocking strategies, test data factories, snapshot testing, and mutation testing. Use when designing test strategies, writing tests, or improving test coverage.

Shopping cart and checkout flow design: cart architectures (session, DB, Redis, headless cart APIs), express checkout (Apple Pay, Google Pay, Shop Pay, Amazon Pay), shipping integration (ShipStation, Shippo, EasyPost), tax engines (Avalara, TaxJar), promotion/discount engine, cart recovery (Klaviyo, Omnisend), BOPIS (buy online pick up in-store), guest checkout, address validation, and checkout conversion optimization.

E-commerce analytics: conversion funnel tracking (browse to purchase), revenue attribution, cohort analysis, customer lifetime value (CLV), RFM segmentation, A/B test analysis (statistical significance), and key metrics (AOV, conversion rate, cart abandonment rate, repeat purchase rate).

Inventory management for e-commerce: WMS integration (warehouse management systems), dropshipping, 3PL (ShipBob, Flexport), demand forecasting, lot/batch tracking, inventory valuation (FIFO/LIFO/ weighted average), cycle counting, stock tracking (available, reserved, committed), multi-location inventory, backorder handling, reservation patterns, stock alerts, and inventory sync across channels.

Order processing for e-commerce: order state machine (pending through delivered/cancelled/returned), fulfillment workflows, returns/exchanges (RMA), invoice/receipt generation, order event sourcing, split shipments, and order notifications.

Payment gateway integration patterns for e-commerce: Stripe, PayPal, Adyen, Square, Mollie, Razorpay, Checkout.com, BNPL (Klarna, Affirm, Afterpay), crypto payments (BitPay, BTCPay), payment orchestration (Primer, Spreedly), 3DS2 authentication, fraud prevention (Sift, Riskified), subscription billing, refunds/disputes, multi-currency, and idempotency.

PCI DSS compliance for e-commerce: compliance levels (SAQ A, SAQ A-EP, SAQ D), cardholder data handling, tokenization (Stripe, Braintree tokens), secure payment forms (iframes, hosted fields), network segmentation, vulnerability scanning, penetration testing, and compliance audit preparation.

Product catalog design for e-commerce: headless platforms (Shopify, Medusa, Saleor, commercetools, Vendure), PIM integration (Akeneo, Pimcore, Salsify), data modeling (products, variants, attributes, categories, collections), GS1/GTIN barcodes, configurable/bundled products, dynamic pricing, reviews and ratings (Bazaarvoice, Yotpo), feed syndication (Google Shopping, Facebook Catalog), schema.org Product markup, tax calculation (Avalara, TaxJar), multi-language/localization, catalog search indexing, and image/media management.

Search and merchandising for e-commerce: product search relevance tuning, faceted navigation, recommendation engine patterns (collaborative filtering, content-based), A/B testing for layouts, personalization, and SEO for product pages.

Guides banking API integration: Open Banking standards (PSD2, UK Open Banking, FDX), Plaid integration (Link, transactions, balance, identity), account aggregation, payment initiation (PISP), account information (AISP), BaaS platforms (Unit, Synapse, Column), and API security (mTLS, OAuth2, FAPI). Use when integrating with banking services.

Guides financial data modeling: account structures (asset, liability, equity, revenue, expense), currency handling (ISO 4217, minor units), decimal precision (BigDecimal, integer cents), multi-currency ledgers, financial instrument representation, and temporal data patterns. Use when designing database schemas for financial applications.

Guides fintech security: HSM integration (key generation, signing, encryption), cryptographic key management (BYOK, rotation, key ceremony), PCI DSS for fintech, data encryption (field-level, tokenization), secure multi-party computation, zero-knowledge proofs, and SOC 2 Type II requirements. Use when implementing security controls for financial systems.

Guides fraud detection implementation: rule-based detection (velocity checks, amount thresholds, geo-anomalies), ML-based anomaly detection (isolation forest, autoencoders), device fingerprinting, behavioral biometrics, 3DS2, fraud scoring pipelines, case management, and chargeback prevention. Use when building fraud prevention systems.

Guides double-entry ledger design: journal entries, chart of accounts, sub-ledgers (AR, AP, GL), reconciliation between ledgers, immutable append-only audit trails, balance calculations (running vs computed), and ledger-as-event-log pattern. Use when designing accounting systems or financial record-keeping.

Guides regulatory compliance implementation: SOX controls (segregation of duties, access controls, change management), PSD2 (SCA, open banking APIs, TPP authorization), KYC/AML (CDD, EDD, PEP screening, sanction lists), GDPR for financial data, MiFID II, Basel III, and regulatory reporting pipelines. Use when implementing compliance features or auditing financial systems.

Guides trading system design: order matching engines (price-time priority, pro-rata), market data feeds (WebSocket, FIX protocol), order types (market, limit, stop, stop-limit), position management, P&L calculation, risk limits, low-latency architecture, and market microstructure. Use when building or reviewing trading platforms.

Guides transaction processing: ACID guarantees for financial operations, idempotency (idempotency keys, deduplication), distributed transactions (saga with compensating transactions), settlement workflows, batch processing, reconciliation, and transaction lifecycle state management. Use when implementing payment flows or financial operations.

Clinical data modeling covering healthcare terminology systems (ICD-10, SNOMED CT, LOINC, RxNorm, CPT, NDC), clinical document architecture, patient data normalization, temporal clinical data patterns, and clinical decision support data models.

EHR system integration covering Epic, Cerner/Oracle Health, and Allscripts platforms, HL7v2 messaging, interface engines, CCD/C-CDA document exchange, and integration testing with vendor sandboxes.

Healthcare analytics covering population health management, clinical decision support, quality measures (eCQM, HEDIS, MIPS), de-identified analytics, research data lakes (OMOP CDM), outcomes analysis, and social determinants of health data.

HIPAA compliance implementation covering technical, administrative, and physical safeguards, Business Associate Agreement checklists, risk assessment methodology, and breach notification procedures. Use when building or reviewing healthcare systems that handle PHI.

HL7 FHIR interoperability covering FHIR resources, RESTful API patterns, server implementation, SMART on FHIR authorization, CDS Hooks, Bulk Data Access, and US Core Implementation Guide profiles.

Medical device software development covering IEC 62304 software lifecycle, ISO 14971 risk management, design controls, software verification and validation, FDA regulatory submissions, software change control, and cybersecurity for medical devices.

Protected Health Information (PHI) data handling covering the 18 HIPAA identifiers, de-identification methods (Safe Harbor, Expert Determination), minimum necessary principle, access controls, audit logging, encryption, and secure disposal.

Telehealth system architecture covering HIPAA-compliant video consultation, remote patient monitoring, patient portal design, asynchronous telehealth, and billing integration with telehealth-specific CPT codes.

IoT device lifecycle management including zero-touch provisioning, firmware OTA updates with rollback, device registry, device twin/shadow state patterns, command-and-control mechanisms, and fleet-wide operations.

Digital twin design patterns including state-based and simulation-based modeling, real-time state synchronization, predictive maintenance via simulation, what-if scenario analysis, 3D visualization, and platform guidance for Azure Digital Twins and AWS IoT TwinMaker.