For founders and teams shipping AI

AI, from demo to production.

Anyone can wire a model API in a weekend. What kills the feature is everything after: retrieval that is wrong on your data, quality that drifts, a security review it cannot survive, a cost per request nobody measured, and a system only one person understands. I have hit all five in production — at enterprise scale, on someone else’s budget.

20+
Production AI workflows running on the platform RAG framework I designed and shipped
1M+
Transactions a day on the platforms the agentic pipeline feeds, across 300+ enterprise clients
65+
Engineers on the AI-assisted development workflow I standardised
19 yrs
Enterprise platforms behind the AI work — zero compliance incidents across every governed workflow
01 · The five failures

What actually kills an AI feature.

Not the model. Every one of these is an architecture problem, and every one has a receipt behind it.

01 · Accuracy

It is confidently wrong on your data.

  • Retrieval is the product; the model is a component
  • Hybrid keyword + vector search with semantic re-ranking, structure-aware chunking
  • Entitlement filters composed into the query itself, not applied after
  • A citation guard implemented as a checked set operation in code — not a prompt asking the model to cite
  • Receipt — the retrieval platform behind 20+ live enterprise workflows
02 · Drift

It quietly gets worse.

  • A prompt tweak fixes one complaint and silently breaks nine untested cases
  • Golden datasets written with your domain expert before orchestration is built
  • Groundedness and citation checks verified in code
  • Regression gates in CI — a prompt change is a code change
  • Receipt — eval gates that let a team ship a fix during a pre-peak change freeze
03 · Security

It fails the first serious review.

  • Your first enterprise customer, diligence, or an auditor asks what stops it leaking
  • Content safety, prompt-injection defense, PII / PHI redaction
  • Tool-level permissions and a human approval gate before anything writes back
  • Consent scope, retention and an audit trail that answers “who approved this?”
  • Receipt — PoC to production alongside InfoSec and C-suite; zero compliance incidents
04 · Economics

The unit economics do not work.

  • Cost per request decides whether the feature has a margin
  • Semantic caching keyed on scope, entitlements, prompt version and freshness generation
  • Per-workflow token budgets, model tiering, retrieval sized to the job
  • Measured before launch, not discovered on the invoice
  • Receipt — 25% infrastructure cost reduction on the platform consolidation I led
05 · Handover

Nobody can take it over.

  • It lives in one person’s notebook and one person’s head
  • Every workflow ships with its eval suite and a runbook
  • The architecture is written down in the same format as the reference designs on this site
  • Your team owns it the day the engagement ends
  • Receipt — six published architectures and six case studies, in exactly that format
06 · The principle

Read freely, act carefully.

  • Agents read your systems of record and policy freely — grounded, cite-or-refuse
  • Every side-effecting action passes one governed boundary
  • Guardrails, then human approval, then an idempotent, audited write-back
  • Reading is cheap and reversible; writing is neither. The architecture should say so
  • See it drawn end to end →
02 · Engagements

Four ways in.

Rates depend on the shape of your data and the depth of the guardrails. I quote after I have seen both — never before.

1 weekAssessment

De-risk review. An honest read on what you already have.

Retrieval quality against a real question set, an eval baseline your team can keep running, the guardrail gaps that will surface in diligence, a measured cost per request, and a 90-day plan. Delivered written, so it is useful whether or not we work together after it.

2–4 weeksBuild

Build sprint. One workflow, end to end, in production.

Data, retrieval, orchestration, evals, guardrails, deploy. It ships behind a flag with a golden set, a runbook and a cost model — not a notebook and a demo video. Scoped to one workflow that has a real user waiting on it, because that is the only scope that finishes.

OngoingFractional

Fractional AI architect. Embedded, part-time, with your team.

Architecture and design reviews, a reusable guardrail kit your engineers apply across features, eval discipline that outlasts me, and help setting the hiring bar for AI engineers. For teams with good engineers and nobody who has taken an LLM system to production before.

Full-timeForward deployed

Forward deployed. Architecture and hands on keys.

For companies where AI is the product rather than a feature, and the work means sitting with customers where the system meets the real workflow. Open to remote Forward Deployed Engineer and Principal / Enterprise / Senior AI Architect roles.

03 · The first 30 days

What a build sprint looks like.

The order matters more than the speed. Nothing gets built until we agree, in writing, what a correct answer looks like.

Days 1–3 · Frame

Define “right” before building anything.

  • Pick one workflow that has a real user waiting on it
  • See the actual data — redacted is fine
  • Write down what a correct answer is, as 20–30 concrete examples
  • Agree where a human must stay in the loop
Days 4–15 · Build

Retrieval first, orchestration second.

  • Retrieval built and tuned against the golden set
  • Orchestration only once retrieval is honest
  • The golden set goes green before anything else happens
  • Cost per request measured as it is built, not after
Days 16–30 · Guard & hand over

Ship it, then make it survivable.

  • Guardrails and an approval gate wherever money or safety moves
  • Ship behind a flag and watch it on real traffic
  • Regression gates wired into your CI
  • Runbook, eval suite and architecture handed to your team
04 · Terms of engagement

What I need, and what I will not do.

What I need from you

Four things, and we can start.

  • One workflow that has a real user waiting on it
  • A sample of the actual data — redacted is fine
  • One person who can say what a correct answer looks like
  • Someone who can make the go / no-go call
What I will not do

Four things, whoever is asking.

  • Fine-tune a model when better retrieval solves it cheaper
  • Let an agent write to your systems with no approval gate on day one
  • Quote a price before I have seen the shape of your data
  • Hand you a demo with no eval suite behind it
05 · Before you decide

Check the work first.

Enterprise work sits behind an NDA, and you are right to discount it. These you can open, read and pick apart without talking to me.

Built solo · 48 hoursAgentic · Assurance

An agentic audit platform, built inside a 48-hour window.

Four bounded agents under a supervisor that is deliberately not an agent, a citation guard checked in C#, fourteen deterministic invariants and a hash-chained ledger. The design line: the model reads, retrieves and explains — it never sets the monetary verdict. Production-shaped, not production-deployed, on synthetic data — and the write-up says so.

Read the case study →
ProductionRAG · Platform

Making enterprise RAG a platform, not a project.

The generalised architecture behind the framework running 20+ production AI workflows — hybrid retrieval that survives identifier queries, entitlement filtering pushed inside the query, a semantic cache that knows when it is lying, and why a promotion peak is the honest test of shared AI infrastructure.

Read the case study →
Open source · MITHealthcare · FHIR

HealthQCopilot, drawn end to end — and the code is public.

Five narrow agents on .NET 10 and Semantic Kernel, including a hallucination guard that validates every output against the patient’s own FHIR record. Consent, PHI redaction, tool allow-lists and an audit trail. Read the repository before you read my résumé.

Open the walkthrough →
Reference designsSix architectures

Six interactive architectures, every node with its failure mode.

Enterprise ERP, healthcare, education, and offline-first designs for low-resource settings. Click any node for its responsibilities, tech and standards, controls and NFRs, a worked example, and what happens when it fails. Except the HealthQCopilot walkthrough, these are reference designs rather than shipped products.

Browse the architectures →
06 · Next step

Send me the one workflow you wish already worked.

Thirty minutes. Bring the workflow you would most like to automate and, if you have one, an example of it going wrong. You will leave with an honest read on whether it is a retrieval problem, an eval problem, a guardrail problem — or not an AI problem at all. Whether or not you hire me. If it is not a fit, I will say so on that call and tell you what I would do instead.

Email
services@atiqulislam.dev
LinkedIn
linkedin.com/in/mdatiqulislam
GitHub
github.com/imatiqul
Résumé
View & download (PDF)
Based in
Irving, Texas · remote, US hours
Typical start
A paid discovery week before anything larger