From NFL on Roblox
to AI firewalls
Game developer and AI engineer in Karachi, shipping since 2019.
2017Unreal at Staffordshire
Six games for my BSc, solo and in teams of up to 19.
- GVE showcase
- 3rd, collaborative games. 5th, game programming
- Graduated
- June 2020, BSc (Hons) Games Design and Programming
2020Four years of VR at Remio
Unity worlds for Meta Quest, for 100k+ monthly players.
- On the Meta Store
- 15+ VR experiences
- Loading times
- Cut by 25%
- Live ops
- Monthly patches, Nov 2020 to Feb 2025
2025NFL Universe Football on Roblox
Lua and Luau at Voldex: gameplay, UI, live events and the store.
400K+
daily active players on the game I worked on

2026TableSide, dishes in 3D
My company: phone photos of a dish become an AR menu in about ten minutes.
-
Scan the plate
Film the dish in the app. The pipeline builds the model, no manual modelling.
-
See it on the table
Diners scan a QR code and see the dish at true size.
-
Order, pay, review
Kiosk and table ordering, tied into the POS.
130+dishes modelled5+restaurant brands4,000diner scans in 4 weeks
2026Valar, a firewall for AI
A self-hosted gateway between a company's apps and any LLM. Sensitive data is redacted or blocked before a prompt leaves the network.
One base URL
OpenAI-compatible. Apps switch to Valar by changing one URL, with no SDK or code changes.
Reversible redaction
Values become typed placeholders like
[REDACTED:pii.cnic:1]and are restored for the user afterwards. The model never sees them.Deterministic policies
Versioned YAML policy packs decide observe, alert, redact or block. No second LLM, so every decision is explainable to compliance.
Sent by an employee
Is customer ka refund check karo. CNIC 42101-1234567-1, use key sk-example-9f2c on billing.example.com
2 findings: pii.cnic, secret.openai_key
Forwarded to the model
Is customer ka refund check karo. CNIC [REDACTED:pii.cnic:1], use key [REDACTED:secret.openai_key:1] on billing.example.com
Redacted. The reply comes back with the real values restored. The audit log keeps metadata only.
- Detection
- 94% recall, 96% precision on a 400-prompt golden set
- Latency
- +7 ms at p95 before the model call
- Detectors
- 20+ for PII, secrets and prompt injection
- Security
- Keys encrypted at rest, Argon2, metadata-only logs, every query scoped to an org
- Tests
- 216, including proof raw secrets never reach the database
- Stack
- FastAPI, Postgres, Next.js, Docker, OpenRouter and LiteLLM
- Lab
- NVIDIA DGX Spark: LoRA and QLoRA fine-tuning, quantized local models behind Valar
Next, on the bench
Prototypes I am building toward launch.
Ustaad
O-Level Physics, twelve minutes a day.
Mobile web appLime
Holdings and dividends for PSX investors.
Mobile appSudoku
Puzzles graded by technique. No ads.
iPhone and iPad
Games CV or AI CV
Same seven years, told for who is hiring.
Roblox, Unity VR, Unreal and mobile. Gameplay, performance and live ops.
LLM fine-tuning, evaluation and serving, AI guardrails and products shipped.
- Phone
- +92 321 2281328
- Based in
- Karachi, working remote









