ShivSastra — Digital HQ

ShivSastra is the production digital platform and personal engineering HQ operated by Shivam Shukla, built with Next.js 16 App Router, TypeScript, and Supabase.

• Problem: Technical engineers often lack a centralized digital platform that balances high-trust technical proof for engineering leads with clear, transparent service packages for non-technical clients.
• Intended User: Prospective clients, engineering managers, and digital product buyers.
• My Role: Full-stack architect, designer, and developer (Next.js 16 App Router, React 19, TypeScript, Supabase RLS, Razorpay integration, and defensive security hygiene).
• Solution: A production-grade web application featuring server-side rendered showcases, authenticated admin CMS, Razorpay payment processing with cryptographic verification, Cloudflare Turnstile anti-spam, and automated test coverage.
• Verified Status: Deployed in production at https://www.jiosi.online with 25/25 automated store security checks passing, sub-second TTFB, and zero layout shift.
• Evidence: Live website (jiosi.online) and open GitHub repository at github.com/shivam-shukla888/Shivam-Portfolio.

• Full-Stack Next.js Architecture: Server-side rendering (SSR), static optimization, and modular component hierarchy with responsive, high-performance typography.
• Authenticated Admin CMS: Secure credentials-based authentication with session management, role verification, and full CRUD control for projects, services, store items, and lab explorations.
• PostgreSQL & Row-Level Security (RLS): Fine-grained security policies on Supabase PostgreSQL protecting customer orders, inquiries, and private storage assets.
• Server-Side Payment Verification: Integrated Razorpay checkout with HMAC-SHA256 signature verification, server-side price recalculation, and idempotent webhook handling to eliminate payment spoofing.
• Contextual AI Assistant: Groq API integration bounded by strict system instructions, prompt injection defenses, deterministic input sanitization, and read-only public knowledge context.
• Production Defenses: Distributed IP rate limiting, strict Zod schema validation on all API endpoints, and zero-trust parameter boundaries.

• Framework: Next.js (App Router), TypeScript, React, Tailwind CSS
• Database & Auth: Supabase, PostgreSQL, Row-Level Security (RLS)
• Payment & Orders: Razorpay API, HMAC webhook verification
• AI Integration: Groq API (Llama 3), custom safety & validation layers