Tanveer Hoque

Software Engineer  |  Apr 2023 – Present

Civica Ltd. (formerly OLM Systems Ltd.), United Kingdom

• Critical finance API latency: 99s → 0.9s.
• Payment processing: event-driven over RabbitMQ.
• Release path: manual steps → Jenkins pipeline.
• Build and maintain Spring Boot microservices for finance, with JPA queries over PostgreSQL and schema managed by Liquibase.
• Run the payment flow as an event-based process over RabbitMQ, including the scheduling and the failure paths.
• Deploy and operate the services on Google Cloud, day to day, alongside the Jenkins pipelines that build them.
• Stack: Java, Spring Boot, JPA, Hibernate, PostgreSQL, Liquibase, RabbitMQ, GraphQL, Node.js, React, Google Cloud, Jenkins, Docker.

Junior Software Developer  |  Jan 2022 – Apr 2023

OLM Systems Ltd., United Kingdom

• Test coverage: automated suites in pre-release.
• Delivered features across Spring Boot services and their React front ends.
• Improved test coverage for microservices with JUnit in the pre-release environment.
• Took part in story estimation and planning, and kept the reference notes the team used for both.
• Stack: Java, Spring Boot, JPA, PostgreSQL, JUnit, React.

Intern  |  Jan 2019 – Jun 2019

Samsung Research & Development Institute Bangladesh, Dhaka, Bangladesh

• Worked through algorithm and data-structure problems against the standards of a large product organisation.
• Took part in code review and problem-solving sessions with engineers on shipping teams.
• Stack: C++, Java, Algorithms.

agent-platform  |  Author | 2026 to present

Rust, Axum, Tokio, sqlx, SQLite, iced, Docker, Ollama, LM Studio, Python — https://github.com/tanvoid0/agent-platform

• Nine upstreams behind a single endpoint, seven hosted providers and two local runtimes, with no provider-specific path in the client.
• A prompt can be answered by a model on the same machine: no key issued, nothing leaving the host, the same code as the hosted route.
• A caller’s own provider key is accepted per request, and the base URL it may be pointed at is allowlisted, https-only and never a raw IP, so BYOK cannot be turned into a way to reach internal services.

crack-detector  |  Author | 2026

Java, HTML, PowerShell

• Sessions survive a refresh: Postgres 17 with Flyway migrations and optimistic locking behind JPA.
• The state machine is covered by an integration test and the controller by a @WebMvcTest slice, with Testcontainers standing up the database.
• Actuator health checks cover both Postgres and the LLM, so a laptop demo comes up in under two minutes on Docker Compose.

claude-code-plugins  |  Author | 2026 to present

Node.js, Claude Code, Hooks, Subagents, Opus / Sonnet / Haiku — https://github.com/tanvoid0/claude-code-plugins

• Four identical tasks, routed against unrouted: 298,615 tokens versus 921,297, and $0.40 versus $1.28, so 68% cheaper with every result verified by execution rather than taken from the agents’ own reports.
• The gate replayed over 395 real sessions (27.7M output tokens, $690 of spend) would have stopped 6.1% of them, and no others.
• A dispatcher given only the six published descriptions and no repo access routed 18 of 18 tasks correctly, and still 18 of 18 after the descriptions were compressed 31%.

MSc Computer Science  |  Sep 2020 – Sep 2021

University of South Wales, Cardiff, United Kingdom

Dissertation: implementing a secure lost & found application.

BSc Computer Science  |  Jan 2015 – Jan 2019

Daffodil International University, Dhaka, Bangladesh

Dissertation: data analysis on home forestation using IoT. Robotics team and competitive programming.