Skip to content
View Yotoha0303's full-sized avatar

Block or report Yotoha0303

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Yotoha0303/README.md

Yotoha · 独立软件架构师 / Go 后端工程师

Business workflows → Reliable services → Tested delivery → Observable operations

面向业务场景构建可运行、可验证、可交付的软件系统,重点关注订单与库存一致性、身份认证与权限控制、AI 辅助知识工作流,以及自动化测试和云原生交付。

I build software around practical business workflows: order and inventory consistency, authentication and authorization, AI-assisted knowledge workflows, automated testing, and cloud-native delivery.

Engineering Focus: Cloud-Native Go Backend · Full-Stack Systems · AI Application Engineering

Executive Positioning | 专业定位

I engineer business-critical software systems from domain rules to production operations.

我关注的不是单点功能开发,而是把复杂业务规则转化为可验证、可运行、可维护的软件系统:从领域建模、架构决策、数据一致性,到自动化质量门禁、部署、可观测性与故障恢复。

Primary capabilities

  • Business Systems Engineering — transactional workflows, order/inventory consistency, idempotency, state machines, authorization boundaries.
  • AI Product Engineering — traceable AI workflows, evidence-linked outputs, human approval, workspace isolation and controlled publication.
  • Reliability & Delivery Engineering — automated testing, CI/CD, containerized deployment, observability, backup/restore and operational verification.

技术方向: Go 后端 · TypeScript / Next.js 全栈 · AI 应用工程化 · 云原生交付。

I optimize for verifiable engineering outcomes—not technology lists, inflated scale claims, or architecture for its own sake.

我的工作标准是可验证的工程结果,而不是技术名词堆砌、未经证明的规模宣称,或脱离业务目标的架构复杂度。

Selected Engineering Outcomes | 技术成果与工程案例

以下内容来自公开仓库中的实现、测试记录和工程文档。它们是独立研发与协作项目的技术案例,不代表已签约付费客户或商业营收。

01 · AI Workflow Architecture — KnowTrace-Workflow

Problem: AI-assisted knowledge systems can lose source context, mix generated suggestions with approved records, and make decisions difficult to reproduce.

Engineering response: Built a record-first workflow with version-bound AI runs, evidence snapshots, human review, release-readiness gates and workspace-level isolation. AI suggestions remain pending candidates until a separately authorized human action accepts them.

Evidence available in repository:

  • 13 business domains and 22 versioned database migrations.
  • 12-container self-hosted deployment topology documented; this topology is currently marked unverified after the VPS was decommissioned.
  • Production cloud demo with Vercel, Render and Supabase, plus scheduled health probes.
  • Documented load-test baseline: 1,000 requests / concurrency 20, 100% success, p95 161.0 ms in the recorded test environment.
  • Isolated data-layer restore drill completed in 36 seconds.

Engineering value: Preserves source provenance, makes AI-assisted decisions reviewable, and turns publication policy into explicit, testable gates.

Repository · Live Demo

02 · Transactional Backend — Go Order & Inventory

Problem: Retries, concurrent stock deductions and asynchronous order expiry can create duplicate orders, overselling or inconsistent business states.

Engineering response: Implemented user-scoped idempotency, transactional stock updates, conditional SQL updates, order state transitions, Redis Lua reservation, transactional outbox and RabbitMQ TTL/DLX consumers.

Evidence available in repository: CI workflow, business-flow documentation, integration checks, Docker Compose environment and operational metrics endpoints.

Engineering value: Demonstrates how correctness is enforced across database transactions, cache reservations and asynchronous processing—not merely through controller-level validation.

Repository · Live Demo

03 · Identity & Access Control — Go User System

Problem: Authentication is not just token issuance; session lifecycle, revocation, replay, authorization and abuse controls must remain consistent.

Engineering response: Built a self-hostable Go authentication service covering token lifecycle, refresh rotation, session revocation, replay detection, RBAC and account/IP rate limiting.

Engineering value: Separates identity and authorization concerns from business services and documents the remaining production-readiness boundary.

Repository

04 · Quality Engineering — Containerized QA Runtime

Problem: Test environments drift across developer machines and CI, while API, browser, performance and mobile checks often remain fragmented.

Engineering response: Designed a containerized QA toolchain integrating Python, Pytest, Playwright, k6, Appium, PostgreSQL, Prism mock services, Allure reporting and Jira API integration.

Engineering value: Makes test execution reproducible and brings API, UI, performance and reporting workflows into a shared delivery environment.

Repository

05 · Collaborative Protocol Engineering — Koliance

Scope: Organization-level collaboration on an autonomous-agent trust and economic protocol. Contributions should be evaluated as specific engineering work, not as sole ownership of the full protocol.

Engineering areas: Frontend integration, Go event-processing recovery, RPC resilience, consistent error contracts and CI quality gates.

Organization Repository

Architecture Principles | 专业思考

Principle Engineering position
Correctness before throughput Define invariants, transaction boundaries and failure semantics before optimizing concurrency.
AI must be auditable Preserve input versions, model/run context, evidence and human approval boundaries.
Delivery is part of design A feature is incomplete without repeatable build, deployment, health checks and rollback/recovery paths.
Observability must support decisions Logs, metrics and traces should help identify what failed, where, and with what business impact.
Complexity requires a business case Introduce microservices, queues, caches or Kubernetes only when their operational cost is justified.
Claims require evidence Distinguish implemented, tested, deployed, load-tested and production-operated capabilities.

Engineering Engagement Areas | 可承接的工程问题

I focus on bounded, evidence-driven engineering work such as:

  • Go backend services and transactional business workflows.
  • AI-assisted internal tools and traceable knowledge workflows.
  • Authentication, authorization and session lifecycle design.
  • API/UI automation, CI quality gates and reproducible test environments.
  • Docker-based deployment, observability and operational hardening.

合作范围以明确的问题、交付边界、验收标准和运行责任为基础。公开项目展示的是工程能力与验证记录,不构成虚构客户案例或商业交付承诺。

Technical discussion & collaboration | 技术交流与合作

For an architecture review, a technical discussion, or a bounded contract collaboration, open an Issue in this profile repository. Include the problem context, expected outcome, constraints, scope, and acceptance criteria. I will assess fit and feasibility before proposing an approach; opening an Issue does not imply availability or acceptance of the work.

如需进行架构评审、技术交流或范围明确的合同协作,请通过 GitHub Issue 提交问题背景、预期结果、约束条件、工作范围和验收标准。我会先评估问题与交付边界,再讨论实施方案;提交 Issue 不代表承诺接单或确认档期。


Quick Navigation | 快速导航

Core stack: Go · Gin · MySQL/PostgreSQL · Redis · TypeScript · React/Next.js · Docker · Kubernetes · GitHub Actions · Prometheus/Grafana


Engineering Portfolio | 工程项目索引

核心项目按其解决的问题组织。建议从对应仓库的 README、测试、CI 和部署文档核验实现范围与成熟度。

Featured Projects | 核心项目

The first three projects are the main portfolio entry points: an AI workflow product, a transactional business service, and an authentication service. Each repository contains implementation details and verification boundaries.

AI-Assisted Knowledge Workflow with Traceable Evidence | 可追溯的 AI 知识工作流

A full-stack application that connects capture, AI-assisted organization, evidence review, and controlled publication. AI outputs are stored as reviewable candidates tied to input versions; they do not silently overwrite source records or make final decisions. The repository includes a deployed demo, cloud and self-hosted deployment paths, CI checks, health probes, backup/restore workflows, and observability.

将记录采集、AI 辅助整理、证据审查与受控发布串成完整流程。AI 输出作为可复核候选项与输入版本关联,不直接覆盖原始记录,也不代替人工作出最终判断。仓库包含在线演示、云端与自托管部署路径、CI 检查、健康探测、备份恢复流程和可观测性配置。

场景与收益: 适用于需要整理大量资料、追踪 AI 生成内容依据并由人员审核后发布的知识工作流;通过版本关联和人工审核降低来源丢失与未经确认内容直接发布的风险。

Stack: Next.js, React, TypeScript, Tailwind CSS, Drizzle ORM, PostgreSQL, Zod, Go, Gin, GORM, Redis, Docker Compose, GitHub Actions, Prometheus, Grafana, Loki.

Order and Inventory Consistency | 订单与库存一致性

A Go business service focused on the order lifecycle rather than a broad but shallow storefront. It demonstrates transaction boundaries, conditional stock updates, idempotent requests, legal state transitions, timeout cancellation, inventory reconciliation, and operational signals.

聚焦订单主链路,而非堆叠商城外围功能。通过事务边界、条件库存扣减、请求幂等、状态流转、超时取消、库存对账和运行指标,验证并发业务场景下的数据一致性处理。

场景与收益: 面向促销抢购、库存预扣和网络重试等订单场景,重点降低重复请求引发的重复扣减、超卖与订单状态不一致风险;具体并发能力和账实差异应以仓库中可复现的压测数据为准。

Stack: Go, Gin, GORM, MySQL, Redis, Lua, RabbitMQ, Transactional Outbox, React, TypeScript, Docker Compose, GitHub Actions, Prometheus.

Authentication and Access Control | 身份认证与访问控制

A self-hostable authentication service with browser-facing administration UI. The project covers token lifecycle, refresh rotation, session revocation and replay detection, RBAC, account/IP rate limiting, migration, security checks, and container/Kubernetes deployment manifests. The repository marks the current release as a release candidate and provides a production-readiness checklist.

可自托管的身份认证服务及管理界面,覆盖 Token 生命周期、Refresh Rotation、会话吊销与重放检测、RBAC、账号/IP 限流、数据库迁移、安全检查,以及容器和 Kubernetes 部署配置。仓库将当前版本标注为候选版本,并提供生产使用前检查清单。

场景与收益: 适用于需要独立身份服务的中小型应用或内部系统;将会话生命周期、权限边界和安全检查集中管理,减少业务服务重复实现认证逻辑的成本。

Stack: Go, Gin, GORM, MySQL, Redis, React, TypeScript, Vite, Docker, Kubernetes, GitHub Actions, CodeQL, Prometheus.

Cloud-Native Delivery and Failure Verification | 云原生交付与故障验证

An executable engineering lab for service boundaries, order Saga compensation, reliable messaging, worker recovery, Kubernetes deployment, immutable image releases, backup/restore, bounded load tests, and repeatable fault drills. It is explicitly a validation lab, not a claim of production-scale operation.

用于验证服务边界、订单 Saga 补偿、可靠消息、Worker 故障恢复、Kubernetes 部署、不可变镜像发布、备份恢复、有界压测和可重复故障演练的工程实验系统。项目明确定位为可执行验证实验,不将测试结果等同于生产规模承载能力。

场景与收益: 用于在上线前演练消息延迟、Worker 中断和恢复流程,提前发现部署、补偿与恢复机制中的缺口;它是验证环境,不代表已具备生产规模的 SLA。

Stack: Go, MySQL, RabbitMQ, Docker Compose, Kubernetes, Kustomize, GitHub Actions, GHCR, Prometheus, Grafana, OpenTelemetry, Tempo.

Quality Gates for AI-Assisted Development | AI 辅助研发质量门禁

An experimental framework that turns development rules into executable checks. It focuses on stage-transition gates, negative testing, evidence-backed verification, least-privilege role separation, and consistency between repository state and progress documentation.

将 AI 辅助开发中的工程要求转化为可执行检查,覆盖端到端质量门禁(Quality Gates)、负向测试、证据化验证和最小权限隔离。该项目当前标注为 Experimental。

场景与收益: 用于降低 AI 辅助改动遗漏检查、缺少验证证据或越权操作的风险;目前属于实验性研发工具,不宣称已量化提升团队交付效率。

Stack: PowerShell, Bash, Git hooks, CI workflows, automated verification.

Containerized QA Automation Toolchain | 容器化自动化测试工具链

A reproducible test environment that separates host tools from test runtimes and supporting services. It brings together browser/API automation, performance tests, mock services, test reports, mobile automation bridges, and CI execution.

通过容器化测试运行时隔离宿主工具与测试依赖,整合浏览器/API 自动化、性能测试、Mock 服务、测试报告、移动端自动化桥接和 CI 执行。

场景与收益: 面向需要在不同机器或 CI 环境中重复执行回归测试的项目,减少环境漂移,并让 API、UI 和性能检查能够纳入统一的交付流水线。

Stack: Python, Pytest, Playwright, k6, Appium, PostgreSQL, Prism, Allure, Docker, Dev Containers, GitHub Actions, Jira API.


Organization Collaboration | 组织协作项目

Autonomous AI Trust Infrastructure & Real-Time Trading Workflows | 自主 AI 信任基础设施与实时交易工作流

A collaborative full-stack project combining a real-time trading dashboard with infrastructure for autonomous-agent identity, bounded delegation, and on-chain economic activity. My contribution focus spans frontend integration, backend event-processing reliability, and delivery quality—not a claim of sole ownership of the organization repository.

参与面向自主 AI Agent 的信任与经济基础设施项目,结合实时交易仪表盘、身份与授权边界及链上交互。贡献重点包括前端集成、后端事件处理可靠性和交付质量;该仓库属于组织协作项目,不代表个人独立拥有整个项目。

Contribution areas | 贡献方向:

  • Frontend integration | 前端集成: Authentication-state synchronization and responsive UI fixes across trading workflows.
  • RPC resilience | RPC 韧性: Multi-endpoint failover to improve behavior when an RPC endpoint becomes unavailable or unreliable.
  • Go event processing | Go 事件处理: Listener watermark and reconnect handling to support recovery after interruptions.
  • Consistent error contracts | 统一错误契约: ADR-006 unified error handling across relevant application boundaries.
  • CI quality gates | CI 质量门禁: Test and coverage checks to make regressions visible before integration.

Stack: Next.js, React, TypeScript, Go, PostgreSQL/Supabase, Solidity, Monad Testnet, GitHub Actions.


Project Planning & Automation | 项目管理与自动化

Use GitHub Projects (v2) as the portfolio-level planning surface for prioritization, status tracking, and cross-repository work. Recommended workflow: Backlog → Ready → In Progress → In Review → Done, with issue/PR-linked items, owner and priority fields, and automations for status changes when pull requests are opened, reviewed, merged, or issues are closed. Keep implementation evidence in repository Issues and PRs; use the Project board for coordination rather than duplicating technical details.

使用 GitHub Projects (v2) 作为跨仓库的项目规划看板,统一管理优先级、进度和交付状态。建议流程:待规划 → 就绪 → 进行中 → 审查中 → 已完成,关联 Issue/PR,并设置负责人、优先级等字段;在 PR 创建、审查、合并或 Issue 关闭时,通过自动化同步状态。技术细节和验证证据仍保留在各仓库的 Issue 与 PR 中,看板负责协调,不重复维护实现细节。


Technology Stack | 技术栈

Area Technologies Practical Use
Backend Go, Gin, GORM REST APIs, business services, authentication, state transitions
Frontend TypeScript, React, Next.js, Vite, Tailwind CSS Admin workspaces, full-stack workflows, responsive UI
Data PostgreSQL, MySQL, Redis, Drizzle ORM Relational data, migrations, caching, session and rate-limit state
Messaging RabbitMQ, Transactional Outbox, TTL/DLX Asynchronous workflows, retries, delayed cancellation, idempotent consumers
Testing Go testing, Vitest, Playwright, Pytest, k6, Appium Unit/integration tests, E2E checks, API/UI automation, bounded load tests
Delivery Docker, Docker Compose, Kubernetes, Kustomize, GitHub Actions, GHCR Reproducible environments, CI/CD, release artifacts, deployment verification
Operations Linux, Nginx, Caddy, Prometheus, Grafana, Loki, OpenTelemetry, Tempo Health checks, metrics/logs/traces, alerting, diagnosis and recovery
AI application OpenAI-compatible APIs, DeepSeek, structured workflow and review controls AI-assisted synthesis with traceability and human review

Engineering Practices | 工程实践

  • Business flow first | 业务闭环优先: Validate the complete path from request to persisted state and observable outcome.
  • Explicit consistency | 一致性显式化: Define idempotency, transaction boundaries, retry behavior, and compensation for state changes.
  • Access control by design | 权限边界明确: Enforce authentication, authorization, session lifecycle, and least privilege at service boundaries.
  • Repeatable delivery | 交付可重复: Keep environments, migrations, build steps, and deployment checks versioned and executable.
  • Quality Gates & Regression Baselines | 质量门禁与回归基线: Use automated tests, CI results, runtime checks, and repeatable failure drills to detect regressions before release.
  • Operational readiness | 面向运行维护: Treat logs, metrics, backup/restore, runbooks, and rollback as part of delivery—not post-release extras.
  • State project maturity honestly | 如实标注成熟度: Distinguish implemented features, locally verified behavior, deployed demos, bounded test results, and production-scale claims.

Current Focus | 当前重点

Build and validate small, end-to-end software products; improve Go backend and full-stack delivery; use AI where it reduces implementation or operating cost; and make reliability, security, and maintainability visible through repeatable evidence.

围绕真实业务问题构建小而完整的软件产品,持续提升 Go 后端与全栈交付能力;仅在能够降低开发或运行成本、改善产品价值时引入 AI,并通过可重复验证的证据呈现可靠性、安全性与可维护性。


Note | 说明: The repositories above are public engineering projects and labs. Benchmarks and deployment setups apply only to their documented environments and test boundaries; they should not be interpreted as production SLA or commercial customer results unless explicitly stated in the relevant repository.

以上为公开工程项目与实验系统。性能数据和部署能力仅适用于各仓库明确记录的环境与测试边界;除非对应仓库另有明确说明,不应将其理解为生产 SLA 或商业客户成果。


GitHub stats Top languages

Pinned Loading

  1. KnowTrace-Workflow KnowTrace-Workflow Public

    AI-assisted knowledge workflow with traceable evidence, self-hosted deployment, CI/CD, observability, and reliability engineering.

    TypeScript 5 2

  2. go-order-management-system go-order-management-system Public

    Go 订单库存一致性服务:MySQL 事务、Redis、RabbitMQ、Outbox、幂等控制、Prometheus 与容器化交付。

    Go

  3. go-user-system go-user-system Public

    Go 自托管认证与 RBAC 系统:JWT/Redis、Kubernetes、CI/CD、Prometheus、备份恢复与安全加固。

    Go 1

  4. ai-collaboration-framework ai-collaboration-framework Public

    AI-DevEx 自动化质量门禁与研发效能工具链 | Automated Quality Gate & Verification Toolchain for AI-Assisted Development

    Go 2