I'm Shibli Rahman Moon (moon-drakon), a software engineering student. I build desktop and web software in Java, C, and JavaScript. I focus on clean architecture, secure data handling, and testing before release.

I also build websites for clients, from a live WooCommerce store to a Next.js and Supabase platform. My coursework includes two Java finance apps and an emergency blood-request system in C. Next, I'm going deeper into AI / ML.

• Software engineering: layered architecture (UI → Service → Model → Repository), OOP design, CI builds
• AI / ML: Python, scikit-learn, and PyTorch; speech input; LLM apps with retrieval
• Full-stack: React and Next.js frontends, Node.js and FastAPI services, SQL and NoSQL databases
• Security: PBKDF2 and BCrypt password hashing, OTP verification, role-based access, audit logs
• Product: scope from user needs, document decisions, verify before release

Open to

Domain	Proficiency	Details
Machine learning		Supervised and unsupervised learning, feature engineering, and model evaluation with scikit-learn, NumPy, and Pandas
Deep learning		Neural networks, CNNs, training loops, and regularization with PyTorch and TensorFlow
NLP & LLM apps		Tokenization, embeddings, prompt design, and retrieval-augmented generation (RAG)
Speech & voice input		Offline speech provider and natural-language quick entry, shipped in Wealthora
Computer vision		Image preprocessing and classification with OpenCV and PyTorch
Data analysis & charts		Pandas and Matplotlib analysis; JFreeChart and Java2D report dashboards
MLOps & deployment		Model serving with FastAPI, Docker containers, and CI with GitHub Actions

Sacred Ganga · Online puja service platform (client, in development)

A web platform for Ganga Sankalp Puja at Har Ki Pauri, Haridwar, for families around the world. Each puja comes with a private video, photos, and a digital certificate.

Dimension	Details
Stack	Next.js 16 · React · TypeScript · Supabase (PostgreSQL) · Tailwind CSS · Zod
Scale	229 TypeScript files, 26 pages, 10 API routes, and 15 database migrations. Separate staging and production environments.
Performance	Median response of 184 ms across 49 staging routes. No layout overflow at 375 px or 1440 px, and no console errors.
Security	31 Postgres row-level security policies. A server-side access policy guards every page, action, and API. CSP and frame-blocking headers, and 0 known production dependency vulnerabilities.
Impact	Staging is live and auto-deploys from the develop branch to Hostinger. 38 test files, including SQL tests on PGlite. 0 contrast failures across 419 checked text elements.
Repository

Staging and production stay strictly apart. Every non-production build is noindex and hidden from search. Access rules live on the server, not in hidden navigation. Database changes ship as reviewed migrations and run against an in-memory Postgres in tests before they touch a real database.

Exclusive Closet BD · Fashion e-commerce store (client, live)

An online fashion store in Bangladesh for sarees, bridal and festive wear, jewelry, and bags.

Dimension	Details
Stack	WordPress · WooCommerce · Blocksy child theme · Variation Swatches · bKash payments
Scale	34 products across more than 15 categories, with visual swatches for product variations
Performance	Served through Hostinger's CDN with Brotli compression and HTTP/3
Security	HTTPS across the store. Custom code lives in a child theme, so theme updates do not overwrite it.
Impact	Live store at exclusiveclosetbd.com. I built it end to end, from catalog setup to checkout.
Live site

The catalog runs on WooCommerce with variation swatches, so shoppers pick options visually. The Blocksy child theme keeps every customization separate from the parent theme. Customers pay with bKash, the most common mobile wallet in Bangladesh.

Mooky Universe · Real-time birthday web app (live)

A Netflix-style birthday site. Friends post wishes, and each wish appears live on every open device.

Dimension	Details
Stack	React · TypeScript · Tailwind CSS · Pusher Channels · Neon PostgreSQL · Vercel serverless functions
Scale	Live wishes, a presence count ("X here now"), and a typing indicator, synced across devices
Performance	Served from Vercel's edge cache with Brotli compression. New wishes show at once and reconcile with the server through SWR.
Security	Database and Pusher secrets stay in serverless functions. Only public keys reach the browser. HTTPS with HSTS preload.
Impact	Live at mookyuniverse.vercel.app. Built mobile-first for iOS and Android, with safe-area support and a fullscreen surprise stage.
Live site

Wishes travel over Pusher Channels, with a server-sent events fallback when WebSockets fail. Posts render right away, and SWR reconciles them with the database. Layouts use svh units and safe-area insets, so nothing jumps when the mobile address bar moves.

TakaTrail · Multi-user personal finance app

A multi-user desktop app for tracking income and expenses, setting monthly budgets, and viewing reports and charts.

Dimension	Details
Stack	Java 17 · Swing · Maven · SQLite / JDBC · JFreeChart
Scale	Multi-user accounts. Each user's transactions, budgets, reports, and exports stay isolated.
Performance	Local SQLite storage with no network calls. Dashboard totals and six-month trends compute on demand.
Security	PBKDF2WithHmacSHA256 hashing with a random salt per user. Every query is scoped to the signed-in user.
Impact	Passed 31 of 31 functional smoke checks and 10 of 10 UI checks. I built the GUI, domain model, dashboard, reports, integration, and tests in a team of three.
Repository

An abstract Transaction class defines the shared contract. Income and Expense extend it and run through Transaction references at runtime. Sign-in gates every screen, and budget overruns trigger warnings. A written verification record covers user isolation, persistence, backup and restore, and validation.

Wealthora · Offline-first finance suite

An offline-first finance suite for accounts, transfers, budgets, recurring entries, savings goals, loans, and debts.

Dimension	Details
Stack	Java 25 · Swing · Java2D · Apache Ant · BCrypt · GitHub Actions
Scale	2.3 MB+ of Java across 10 packages, per-user CSV workspaces, and a separate OTP relay service
Performance	Runs fully offline: finance, reports, import, export, and recovery. Writes use safe file replacement, and one process owns the data folder.
Security	BCrypt for passwords and recovery answers. Email OTP goes through a separate relay, so the app stores no SMTP secrets. OWNER, ADMIN, and USER roles with an audit log.
Impact	CI on GitHub Actions. PDF and CSV export, validated CSV and Money Manager import, offline voice entry, and light and dark themes.
Repository

Data flows one way: Swing UI → Service → Model → Repository → CSV. The UI never touches storage. Services validate and coordinate, and repositories persist. Interfaces wrap export, speech recognition, and OTP delivery, so each one can change on its own. No finance data leaves the device.

NSU Blood Donor & Emergency Request System · Emergency donor matching in C

A role-based system that matches blood donors to emergency requests and tracks each donation until it is verified.

Dimension	Details
Stack	C · structs · binary file I/O (fread / fwrite) · modular functions
Scale	Three roles: admin, donor, and requester. Ships with 139 approved donors and 73 emergency requests for demos.
Performance	Fixed-layout binary records. Request status is recalculated from assignments and verified blood bags.
Security	Admin approval for new donors, PIN-based request tracking, two-step donation sign-off, and an activity log that records who did what.
Impact	Covers the full emergency flow: blood-group matching, multiple and backup donors, donor replacement, and text reports.
Repository

Requests and assignments move through defined states, from pending to fulfilled and verified. Every input is validated. A donation is final only after the requester confirms it and an admin verifies it. Records live in binary files, and reports and logs export as plain text.

Since 2026

I build and ship websites for businesses, from WordPress stores to custom Next.js platforms.

Scope of work

• Building Sacred Ganga, a Next.js and Supabase platform for an online puja service, with staging, database migrations, and tests
• Built and launched Exclusive Closet BD, a WooCommerce fashion store with 34 products and bKash checkout
• Run hosting and deploys on Hostinger and Vercel
• Work directly with owners on scope, content, and launch

Since 2025

Coursework and team projects focused on object-oriented design, secure app architecture, and tested delivery.

Scope of work

• Built the Swing GUI, OOP transaction model, dashboard, reports and charts, integration, and tests for TakaTrail (team of three)
• Worked on Wealthora, an offline-first finance suite with a layered architecture, role-based access, and OTP verification
• Designed and built an emergency blood-request system in C with binary storage and two-step verification
• Wrote architecture, OOP mapping, security, and verification docs for each project

Since 2025

I build and document software in public. I focus on clean code, security, and repeatable builds.

Scope of work

• Maintain public repositories with architecture, security, and verification docs
• Run builds and checks with GitHub Actions
• Built Mooky Universe, a real-time web app on React, Pusher, and Neon Postgres
• Build AI / ML and full-stack prototypes in Python, React, and Node.js
• Scope from user needs, test with real use, and ship with clear docs

learning:
  - Data structures and algorithms
  - Machine learning and deep learning with PyTorch
  - System design basics
  - Cloud architecture on AWS

building:
  - Sacred Ganga, from staging to public launch
  - Secure desktop and web apps
  - AI-assisted personal finance tools
  - Full-stack products with React, Next.js, and Node.js

exploring:
  - LLM apps and retrieval-augmented generation
  - MLOps and model deployment
  - Distributed systems

open_to:
  - Software engineering internships
  - AI / ML engineering roles
  - Open-source collaboration