Deep Dives

Case Studies

The problem, the architecture decisions, and what actually happened after shipping.

PT Global Edutipa Informatika (Healthcare) · 2025

Designing a secure RBAC system for an Electronic Medical Records platform

How a flexible, middleware-driven role-based access control system enabled a multi-role healthcare application to keep sensitive patient data secure across all user types.

4+ distinct roles

User roles supported

Zero post-launch

Unauthorized data access incidents

Ongoing across internship → FTE

Feature development

PT Gajah Nusantara Raya (Internal Platform) · 2026

Building a reliable payment gateway integration with idempotent transaction handling

How idempotent API design and a retry-safe webhook handler made a financial transaction module resilient to third-party gateway failures and duplicate payment events.

Deposit, Withdrawal, Transfer

Transaction types

Zero

Duplicate charge incidents

Fully automated via GitHub Actions

Deployment pipeline