Selected case studies
Workin the light
Five pieces of work: two platform builds at ixo, two backend systems built at BMTX and envel, and guardrails for AI agents. Each one covers the context, the approach, the result and the stack.
ixo · Platform
Multi-cloud Terraform platform
An open-source, config-driven Terraform platform across Vultr, AWS and GCP. A team adds one .tfvars file and gets its own environment, so anyone with code-level skills can bring up their own ixo-like stack.
ixo · Platform & security
GitOps + secrets, from the start
GitOps with ArgoCD and an image-updater, secrets management on External Secrets Operator + Vault with Dex for OIDC, and locked-down Cloudflare tunnels with no public exposure. Set up greenfield.
BMTX · Backend
Identity verification platform
A partner-facing KYC/IDV platform built from scratch, as a gRPC public gateway plus domain engine, a Spring Batch pipeline for PGP-encrypted cohort files, and a decision layer over Socure.
envel · Backend
Zero-downtime migration
A zero-downtime migration restructuring every live user's envelope data for a new budgeting model, in isolated per-user batches behind a per-user switch, alongside the backend move between core banking providers.
opcode · AI platform
Guardrails for AI agents
Platform engineering for AI agents. I took opcode, an open-source desktop app for Claude Code, and rewrote large parts of it into a manager/worker system with model caps, budgets, file locks, an owner inbox and rule files.
Open source
ixofoundation · Apache-2.0
ixo-terra-infra
The multi-cloud Terraform platform from the first case study: core services and monitoring on Kubernetes, with an environment per
.tfvarsfile.My work account: LukePetzer-ixo
Coming
My opcode rewrite
Guardrails, cost limits and governance for AI agents, built on the open-source opcode app. Not public yet.