Industry security tends to get 'looser the closer you get to the database' — backends often connect directly with an admin account, bare and unguarded. PostgreSQL uses role + schema + column-level GRANT + RLS to build outside-in permissions that can go as fine-grained as a single row (or even a single cell), keeping the last lock inside the database itself.
A real-time-voice-first AI English tutoring system: students converse with the AI teacher Emma via microphone (optionally with video/screen sharing), the system corrects mistakes in real time, and generates a post-class report in Chinese. The technical core is LiveKit (Self-hosted WebRTC) + Google Gemini 2.5 Flash Native Audio, with a FastAPI backend handling auth, courses, and data persistence.
A microservice platform orchestrated with Docker Compose: it crawls arXiv papers daily, builds a Qdrant vector index, and delivers bilingual RAG Q&A through hybrid search + re-ranking + Ollama, with email subscriptions and Grafana monitoring.
Using stock price prediction as the subject, I built a complete MLOps lifecycle covering ETL, experiment tracking, model deployment, drift monitoring, and CI/CD — all orchestrated on a single machine with Docker Compose.