https://blog.mohammadabukhadija.tech/ Architecture, security, infrastructure, and AI in Arabic-first products. en https://blog.mohammadabukhadija.tech/arabic-first-multi-tenant-legal-platform/ https://blog.mohammadabukhadija.tech/arabic-first-multi-tenant-legal-platform/ How Nibras is put together: one .NET image in two roles, a request pipeline where order is security, firm isolation in the data layer, authorization that fails closed, background work that never charges twice, and an AI assistant that has to ask first. Thu, 05 Nov 2026 00:00:00 GMT architecture multi-tenancy security AI .NET PostgreSQL https://blog.mohammadabukhadija.tech/arabic-legal-rag-postgres-pgvector/ https://blog.mohammadabukhadija.tech/arabic-legal-rag-postgres-pgvector/ How the legal assistant in Nibras finds Jordanian law: Arabic normalization, statute-aware chunking, an exact-article path before any vector search, debounced indexing, firm-scoped retrieval in SQL, and a rule that a legal answer without a source does not get generated. Thu, 05 Nov 2026 00:00:00 GMT AI RAG PostgreSQL pgvector Arabic .NET https://blog.mohammadabukhadija.tech/fatoora-one-product-three-architectures/ https://blog.mohammadabukhadija.tech/fatoora-one-product-three-architectures/ An Arabic invoice maker built three times in three weeks: a localStorage-first static page with optional Supabase sync, then two Next.js versions on Neon and Clerk. What moved where, why, and which shortcuts were deliberate. Thu, 05 Nov 2026 00:00:00 GMT architecture next.js postgresql arabic rtl side project https://blog.mohammadabukhadija.tech/hand-tracked-vfx-mediapipe-opencv/ https://blog.mohammadabukhadija.tech/hand-tracked-vfx-mediapipe-opencv/ A webcam effect that puts a glowing orb, particles, and a holographic HUD on your fingertips, and fires a burst when your hands meet. How the real-time loop works, how the gesture is read from landmarks, where the frame time goes, and the PyInstaller path bug that hides your model file. Thu, 05 Nov 2026 00:00:00 GMT computer vision Python MediaPipe OpenCV Pygame PyInstaller https://blog.mohammadabukhadija.tech/ratcheting-architecture-rules-modular-monolith/ https://blog.mohammadabukhadija.tech/ratcheting-architecture-rules-modular-monolith/ How I keep module boundaries honest in a large .NET and React codebase without a big-bang cleanup: a generated module manifest, an import and cycle checker in CI, a recorded baseline of existing violations, and a build that fails only on new ones. Thu, 05 Nov 2026 00:00:00 GMT architecture CI/CD .NET React TypeScript refactoring https://blog.mohammadabukhadija.tech/shipping-a-paywalled-ml-model-flask/ https://blog.mohammadabukhadija.tech/shipping-a-paywalled-ml-model-flask/ How a scikit-learn car-price model became a small paid web product: loading the artifacts without taking the site down, carrying form state across a payment redirect, and being honest about what a return URL proves. Thu, 05 Nov 2026 00:00:00 GMT python flask machine learning payments deployment https://blog.mohammadabukhadija.tech/tenant-from-a-header-ef-core-multi-tenancy/ https://blog.mohammadabukhadija.tech/tenant-from-a-header-ef-core-multi-tenancy/ EF Core global query filters made tenant isolation in my HR prototype look solved. The filters were fine. The value feeding them fell back to a request header and a hard-coded default. How I traced it, and how to fix it. Thu, 05 Nov 2026 00:00:00 GMT multi-tenancy security .NET EF Core ASP.NET Core https://blog.mohammadabukhadija.tech/working-with-contractors-without-handing-over-the-codebase/ https://blog.mohammadabukhadija.tech/working-with-contractors-without-handing-over-the-codebase/ How I designed a shared development server where developers get a full private copy of the code, run tests and open pull requests themselves, and still never reach production, take the source home, or touch real data. Thu, 05 Nov 2026 00:00:00 GMT security platform engineering devops Linux CI/CD