Skip to content
View ShibasishPaul's full-sized avatar
🎯
Focusing
🎯
Focusing
  • Moulvibazar, Bangladesh

Organizations

@CuraVite

Block or report ShibasishPaul

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
.github/profile/README.md

Shibasish Paul

22, self-taught, Bangladesh.

I finished high school and chose not to attend university. By then, I'd already spent years studying from international university textbooks and building systems, and I decided that formal education couldn't offer the depth I was already pursuing on my own. The tradeoff is real - I have the knowledge but not the credential, and I'd rather you judge the former.

I trace everything to foundations. If I use a database, I need to understand how it stores pages on disk. If I write in a language, I need to understand its type theory. If I run a server, I need to understand every layer from the TLS handshake to the syscall. This isn't a philosophy I chose - it's how my mind works.

What I'm Building

CuraVite - A healthcare platform for Bangladesh connecting patients, doctors, hospitals, and diagnostic centers. I'm a co-founder and the sole backend architect. The architecture is hexagonal: domain logic isolated behind ports, with swappable adapters for every external dependency, so the database, cache, search, and identity systems can each be replaced without touching business logic. CQRS separates read and write paths. Business invariants are pushed into the database layer (class table inheritance, double-entry accounting enforcement, GiST exclusion constraints for schedule overlaps, trigger-enforced path constraints) so invalid states are structurally impossible at the application layer. The schema is 100KB+ PostgreSQL 18 with PostGIS geospatial queries and async search indexing via pg_notify. On top of that: a full gRPC/Connect API surface (Buf v2, CEL validation, magic-link auth with XSS-safe DeviceIntent patterns), Cloudflare Worker infrastructure, a domain-level atomicity model (UnitOfWork) that decouples business transactions from store-level transactions, and all design, legal, and specification documentation. Security is enforced at the contract layer, not just the runtime: every RPC's auth requirement is a machine-checked protobuf annotation, verified in CI before code is even generated. I design multi-step flows to avoid concurrency hazards by construction, favoring sequences of small, idempotent operations over single points that can race. Alongside my co-founder, I also direct the org's CI/CD and engineering-process automation: reusable GitHub Actions workflows with scoped, least-privilege credentials and pinned dependencies, and automated infrastructure backups. Early-stage startup, private.

linux-security-center (in progress) - Not just an antivirus scanner - a comprehensive Linux security subsystem interface. The vision spans intelligent runtime protection without heavy RAM overhead, firewall management, cgroups isolation, and more. Same architectural discipline as CuraVite: trait-based provider architecture with pluggable scan engines behind port abstractions, async Rust backend with Tokio worker pipelines, Flutter GUI, D-Bus IPC, and a rigorous testing setup (mockall, proptest, criterion, insta). Paused - resuming when time allows.

top-bar-organizer-plus - Took over a dead GNOME Shell extension, revived and significantly extended it. Published on extensions.gnome.org with real users.

ESL curriculum & tutoring - I tutor 10th graders in physics and math - they tell me I teach what no other teacher can teach them well enough. I'm also building an ESL workbook generator for Bengali-English language learning: a multi-agent AI framework that generates curriculum content and runs it through a series of quality testing stages so the end product is a robust, high-quality workbook. The output is typeset in Typst using a custom pedagogical DSL I designed. Currently used for an 8th grader I tutor in English.

Technical Identity

I don't list technologies like checkboxes - any such list is exclusionary by design. What I can tell you:

I have deep knowledge of Rust, C++ (C++11), C, JavaScript, and Bash. C++ was the first language I properly learned - Stroustrup, cover to cover - and I still carry its lessons. Rust is where my love for mathematical rigor and systems engineering converge. I have working fluency in TypeScript (I've built the type system's mental model, I just need practice with its rarer corners), Python, and Dart.

I'm a fullstack developer. I've built with Node.js, Vue, Express, PostgreSQL, gRPC/Protobuf, and Cloudflare Workers.

I learned the art of software architecture and system design from disparate sources - blog posts, documentation, conference talks, other people's code, and years of experience building real systems and playing in my own head, designing and destroying elaborate architectures until the ones that survive are the ones worth building. Domain-driven design, ports and adapters, clean architecture, GoF - I know these patterns, when they earn their complexity, and when they don't. I think about dependency direction, domain isolation, where policy belongs, when to abstract and when abstraction is premature. There's no single book for this - it's more art than science, and I learned it the way you learn art.

I know Linux. Not "I use Linux as my daily driver" - I understand Linux deeply and comprehensively. Put me in any environment and I'll be comfortable and actively contributing within a week or two. Kernel modules, D-Bus, GNOME Shell internals, networking, firewalls, containers, systemd, RPM packaging, shell scripting - this is home.

I practice DevSecOps: security integrated into every layer of build, deploy, and run, not bolted on afterward. I manage production infrastructure, write security tooling, harden systems, automate monitoring and backups, and enforce it as early as the CI pipeline, not just at runtime.

Infrastructure

Self-hosted services - I run dozens of containers on a single VPS, replacing nearly every SaaS product I'd otherwise depend on: email (with proper DKIM and strict DMARC), Nextcloud (files, calendar, collaborative editing, video calls), Immich (photos), Vaultwarden (passwords), Overleaf (LaTeX with full TeX Live), AFFiNE (knowledge base), Jellyfin (media). I wrote the backup automation (with container orchestration, health checks, and rollback on failure) and the custom Overleaf build, and manage the whole stack's configuration through Ansible.

Networking & Security - A separate discipline from self-hosting, and I treat it as one. WireGuard VPN mesh connecting all my devices. Dual-layer nginx architecture with stream-level SNI routing and proper TLS termination preserving real client IPs through every proxy layer. Automated nftables blacklisting from community threat feeds. Hardened SSH with key-only auth. TLS 1.3 everywhere, HSTS, OCSP stapling. Admin endpoints restricted to trusted networks only. I also manage my own domains and DNS through Cloudflare, from zone configuration to edge routing.

Identity & Access Management - FreeIPA for centralized identity management, with working knowledge of LDAP and IdM.

The Shoulders I Stand On

I didn't build any of this alone. These are the people and works that changed my life and how I think - my real teachers:

Tamim Shahriar Subeen (2017) - His Bengali programming blogs and books were the first time I saw that someone from Bangladesh could write about computer science with clarity and authority. He showed me the path existed.

Bjarne Stroustrup (2019) - Programming: Principles and Practice Using C++, cover to cover. My first real language. My first real discipline.

OpenStax (2019-2020) - Free university textbooks for calculus, physics, and statistics gave a kid with no money and no university access the same foundations as any freshman anywhere.

Wikipedia (2019-2021) - Especially for networking. The internet's greatest gift to the self-taught.

Irvine (2021), Drozdek (2021-22), Rosen (2022), CLRS (2022-23) - Assembly, data structures, discrete math, algorithms. The core CS curriculum I built for myself.

Strang; Lay, Lay & McDonald (2022-23) - Linear algebra from multiple angles.

MIT CS50 (2023), Patterson, Hennessy (2023-24), Tanenbaum, Bos (2024) - Databases, computer architecture, operating systems. The systems stack.

Tanenbaum, Steen (2025), Silberschatz, Korth & Sudarshan; Kleppmann (2024-25) - Database systems and distributed systems. Currently shaping how I architect CuraVite.

Hurley, Hutchins, Kelly (2024), Enderton; Mints (2025), and the lineage from intuitionistic logic through lambda calculus to Martin-Löf Type Theory to the Calculus of Constructions to Rocq (2025-26) - Where mathematics and programming become the same thing. My current frontier.

Linus Torvalds - For creating a playground that also happens to be a god-level operating system. The Rust visionaries - For a language that lets me combine mathematical rigor with systems engineering without compromise. The open source community - For giving a kid in Bangladesh with no connections, no money, and no degree the same opportunity to learn and contribute as anyone anywhere.

3Blue1Brown, Veritasium, Kurzgesagt, Khan Academy, PBS Science, AsapScience, Dhruv Rathee - and countless other creators who made complex ideas beautiful and accessible.

Buddha, Descartes, Shankaracharya - and the philosophical traditions that taught me understanding the foundations of one domain illuminates all others.

And the thousands of nameless article writers, blog authors, Stack Exchange answerers, and forum contributors across the internet who collectively built the ground I stand on. I can't name you all, but I owe you everything.

Beyond Code

I like to think while eating, about philosophical questions, politics, society, history, and how it all ties together in this odd universe. I like learning about other cultures and languages - they offer new ways to look at the world.

I like reading fiction and watching movies and series from across the world. Music is my beer and my coffee. I have Spotify to thank for exposing me to so many worlds of music from across this planet.

I tutor students. I'm building things. I'm constantly learning. I'm a geek. I'm a dreamer of a better world.

📍 Bangladesh · 🌐 baudhi.cc (currently offline, spelled as 'bodhi' meaning enlightenment)

Popular repositories Loading

  1. top-bar-organizer-plus top-bar-organizer-plus Public

    A GNOME Shell extension that lets you reorder, group, and show/hide the items of the top (menu) bar — the clock, system indicators, AppIndicator/tray icons, and the items other extensions add — ins…

    TypeScript 4 1

  2. hacker-laws hacker-laws Public

    Forked from dwmkerr/hacker-laws

    💻📖 Laws, Theories, Principles and Patterns that developers will find useful. #hackerlaws

    Shell

  3. cargo-equip cargo-equip Public

    Forked from qryxip/cargo-equip

    A Cargo subcommand to bundle your code into one `.rs` file for competitive programming

    Rust

  4. ryot ryot Public

    Forked from IgnisDa/ryot

    Roll your own tracker!

    Shell

  5. memories memories Public

    Forked from webrenew/memories

    TypeScript

  6. .github .github Public