ZARIYA LABSPVT. LTD.
Contact
Principal-led engineering/Explicit acceptance criteria

Production systems.
Two-week engineering sprints.

From low-latency microservices and high-concurrency billing ledgers to automated data pipelines and edge networks. We architect, deploy, and harden production systems.

Discuss your first sprintExplore reference designs
14 days
Per agreed sprint
Direct
Engineer access
Full
Project handover
zariya / engineering sandboxLocal demonstration

Explore our approach. Ledger operations run locally; ping measures an HTTP request to this website, not production infrastructure.

Type help or choose a command. No live cluster or client data is accessed.

Engineering reference designs

Illustrative approaches to the problems we work on. These designs are not client endorsements or independently audited benchmarks. Workload targets and evidence are agreed per engagement.

Idempotent billing ledger

Duplicate webhooks, concurrent updates and reconciliation gaps.

Webhook → Go transaction → PostgreSQL journal + outbox → event delivery

Design and validation

Enforce durable idempotency and balanced postings inside the database transaction. Retry serialization failures and reconcile external side effects. Redis coordination is optional, never the source of financial correctness.

Replay duplicate events; interrupt commits; verify conservation, retry behavior and reconciliation against a defined dataset.

Discuss a similar system

Satellite imagery pipeline

Large imagery products and delayed geospatial processing.

STAC discovery → selected COG byte ranges → raster processing → validated output

Design and validation

Read only the required imagery windows, track data provenance and validate quality before publishing. Measure processing time separately from satellite acquisition and catalog availability.

Record scene size, bands, region, cache state, cloud cover, quality rules and ingestion-to-result timings.

Discuss a similar system

Private regional ingress

Exposed origins and inconsistent service access controls.

Cloudflare → authenticated ingress gateway → WireGuard backplane → private services

Design and validation

Terminate the edge connection at a documented gateway, authenticate service traffic and define failover boundaries. Origin access restrictions depend on hosting and network controls.

Test origin bypass, certificate rotation, revoked identities, gateway failure and recovery under representative regional traffic.

Discuss a similar system
Capabilities & Core Competencies

Comprehensive Services Bento Grid

Four battle-tested pillars designed for organizations that require zero downtime, verified data integrity, and extreme execution velocity.

Pillar A // Frontline ProductsTier-1 Frontend & SDKs

Application & Product Engineering

High-performance web applications, native and cross-platform mobile runtimes, embeddable JavaScript/TypeScript SDKs, and federated micro-frontends designed for fluid user experience.

• Modern Web & SSR

Astro, Next.js, Svelte, React 19 with instant edge hydration and strict WCAG compliance.

• Mobile & Cross-Platform

Flutter & React Native architectures with offline-first synchronisation engines.

• Embeddable SDKs

Zero-dependency drop-in JavaScript/TypeScript widgets with iframe sandboxing.

• Micro-frontends

Module Federation, shared design systems, and decoupled CI/CD release trains.

TypeScriptAstroReact 19Next.jsFlutterTailwindCSSWebSocketsVite
Pillar B // Core InfrastructureACID • Reconciliation

Distributed Systems & Ledgers

Industrial-grade backends built with Node/TypeScript and Go. We engineer reconciled double-entry financial ledgers, distributed state machines, and high-throughput event brokers.

LEDGER_VERIFICATION_JOURNALSTATE: BALANCED
// Explicit double-entry balance invariant

tx_id: "tx_9981a_sec_audit"

debit_account: "user_wallet_ktm" • $14,250.00

credit_account: "settlement_clearing" • $14,250.00

delta: 0.00000000 (0 Drift Validated)

Go (Golang)Node.js / TSNATS JetStreamApache KafkaPostgreSQLRedis ClusterEvent Sourcing
Pillar C // Systems & HardeningZero-Trust • Edge

Cloud, Networks & Security

Bare-metal and virtualized Linux administration, edge proxy tuning, DDoS mitigation via Cloudflare, container isolation, and audited GitOps CI/CD pipelines.

01

Linux Kernel & OS Hardening

Debian/Alpine baseline audits, sysctl network stack optimizations, and immutable container runtimes.

02

Edge Caching & Reverse Proxies

Traefik, NGINX, and Cloudflare Workers for regional edge caching with measured latency.

Linux / DebianCloudflare EdgeDocker / OCINGINX / EnvoyTerraformWireGuardGitHub Actions
Pillar D // Big Data & AISTAC • Agentic MCP

Data Ingestion & Machine Intelligence

High-throughput ETL pipelines, Earth observation satellite telemetry analytics (STAC compliance), and next-generation Agentic Model Context Protocol (MCP) toolchain runtimes.

• STAC Satellite Analytics

Automated Sentinel & Landsat ingestion, cloud-optimized GeoTIFF processing, and spatial raster indexing for flood & climate analysis.

• Agentic MCP Runtimes

Production deployment of Model Context Protocol servers, knowledge graph memories, and deterministic LLM tool-calling orchestration.

• High-Volume ETL Pipelines

Sub-second streaming transformation of telemetry events with ClickHouse, DuckDB, and Apache Arrow.

• Vector & Graph Retrieval

Hybrid semantic search with pgvector, FalkorDB/Neo4j graph schemas, and strict evaluation benchmarks.

PythonSTAC GeoTIFFModel Context Protocol (MCP)ClickHouseDuckDBApache ArrowpgvectorFastAPI

Sprint Scope Builder

Prepare a starting brief, not an automatic quote. We agree scope, workload measurements and acceptance criteria together before a sprint begins.

Engineering domain
Workload context
Delivery cadence

Reference topology

Go + PostgreSQL transactions, durable idempotency keys and an outbox

Validation plan

Measure the existing workload and agree a regression benchmark.

Proposed delivery

Transactional kernel, reconciliation invariants and replay tests. One bounded implementation with tests, documentation and Day-14 handover.

Use this scope in your brief
System Design Patterns

Reference Architecture Blueprint

A reference structure for discussing failure boundaries, observability and transactional responsibilities.

ZARIYA REFERENCE ARCHITECTURE v4.2REFERENCE DESIGN
01 // INGRESS

Cloudflare Edge & DNS

Anycast BGP routing, WAF layer-7 scrubbing, TLS 1.3 session termination, and cacheable static asset delivery.

Measure: regional HTTP timing
02 // ROUTING

Traefik / Envoy Mesh

mTLS service authentication, rate-limiting tokens, JWT validation, and circuit-breaking proxies.

Protocol: HTTP/3 • gRPC
03 // COMPUTE

Go & TS Micro-Kernels

Stateless service instances, NATS JetStream event streaming, worker pools, and V8 sandbox execution.

Measure: throughput and errors
04 // PERSISTENCE

Gapless Storage Core

PostgreSQL ACID ledger partitions, Redis cache clusters, ClickHouse analytics, and append-only audit journals.

Validate: transaction invariants
Technology Selection Matrix

Tools We Work With

We do not adopt technologies based on hype. Selections depend on workload, operational constraints and maintainability.

// 01 CORE RUNTIMESWORKLOAD DEPENDENT

Languages & Runtimes

  • Go (Golang)v1.23+
  • TypeScript / Node.jsStrict
  • Pythonv3.12+ (ETL)
  • RustCLI & Wasm
// 02 PERSISTENCEACID & TIME-SERIES

Databases & Queues

  • PostgreSQL + pgvectorPrimary OLTP
  • ClickHouseOLAP • Logs
  • Redis Sentinel / ClusterSub-ms Cache
  • NATS JetStream & KafkaEvent Mesh
// 03 INFRASTRUCTUREHARDENED LINUX

Cloud & Networking

  • Cloudflare Workers / KVEdge Compute
  • Debian / Alpine LinuxKernel Hardened
  • Docker & ContainerdOCI Compliant
  • Traefik & NGINXTLS Mesh
// 04 DATA & AGENTSSPATIAL & MCP

Data & Intelligence

  • STAC Satellite APISentinel/Landsat
  • Model Context Protocol (MCP)Agent Runtimes
  • DuckDB & Apache ArrowVector Ingestion
  • GDAL & RasterioGeo Processing
Predictable Engineering Cadence

Two-Week Sprint Operating Model

We eliminate ambiguity with a compressed, high-velocity engineering cycle. Each sprint has a bounded scope, agreed acceptance criteria and a Day-14 handover. Larger systems require multiple sprints.

01
DAY 1 – 2

Architecture & Scope Spec

Deep requirements dissection, interface contract definitions, database schemas, and edge network topology. We lock invariants before any code is committed.

  • ✓OpenAPI / Protobuf contracts defined
  • ✓State machine & ACID boundary audit
  • ✓Threat modeling & zero-trust mapping
  • ✓Explicit scope and acceptance signoff
Deliverable:Technical Architecture Doc (TAD)
02
DAY 3 – 12

Rapid Implementation & Daily Demos

Intense engineering execution in Go, TypeScript, and modern frameworks. Trunk-based development paired with live preview URLs and daily video asynchronous demos.

  • ✓Continuous ephemeral preview branch deploys
  • ✓Daily async Loom & release changelog
  • ✓Zero blocker escalation protocol
  • ✓Reproducible build pipeline
Deliverable:Working Production Candidate
03
DAY 13 – 14

Automated Test Suites & Handover

Rigorous chaos testing, P99 latency load verification, complete runbook documentation, CI/CD access transfer and secret rotation, and production cutover support.

  • ✓k6 & wrk benchmark load test reports
  • ✓Unit + integration tests for agreed acceptance criteria
  • ✓Docker compose / Terraform infra scripts
  • ✓100% IP & repository transfer to client
Deliverable:Production Release & Full IP Transfer
</>

Direct Access to Principal Engineers

No account managers or junior buffers. You work directly with engineers who write the production code.

Fixed-Fee SprintsAgreed Acceptance Criteria
Architectural Doctrine

The Engineering Manifesto

Four non-negotiable engineering principles that dictate how we architect systems, write code, and deliver value without agency friction.

// TENET 01DATA INTEGRITY

Explicit Ledger Transactions

Object-Relational Mapping libraries hide N+1 queries, obscure database deadlocks, and introduce ambiguous transaction boundaries. In financial ledgers, audit systems, and billing pipelines, we write explicit SQL transactions with balanced postings, durable idempotency keys and serialization retries. Your balances are calculated, never updated in place.

• Serializable Isolation|• Reconciliation tests
// TENET 02INFRASTRUCTURE PHILOSOPHY

Boring Tech at Core, Edge at Perimeter

We do not adopt experimental databases for mission-critical core state. At the persistence layer, we rely on battle-tested powerhouses: Go and PostgreSQL. At the perimeter, we harness Cloudflare V8 isolates and Anycast edge networks for regional edge caching. Extreme reliability in the engine room; extreme velocity at the edge.

• Predictable Resource Bounds|• Regional measurements
// TENET 03OPERATIONAL CADENCE

Async-First Delivery

We keep status updates asynchronous and use technical calls when decisions need discussion. We write production software. Every commit triggers automated trunk-based CI tests, ephemeral preview environments, and concise asynchronous video walkthroughs with real performance metrics. You talk directly with the engineers writing the code.

• Daily Loom Demos|• Direct Engineer Access
// TENET 04OWNERSHIP TRANSFER

Day-14 Complete IP & Infra Handover

Zero proprietary platform lock-in. On the final day of every sprint, 100% of the Git repository, Docker orchestration files, Terraform configurations, and automated test suites are formally transferred to your organization. You receive runbooks, deployment scripts and ownership of commissioned code. Third-party dependencies retain their licenses; support and rollout responsibilities are agreed in the scope.

• 100% Client Code Ownership|• Zero Vendor Lock-in

Discuss your first sprint

Tell us what needs to work, what exists today, and how you will judge success. Scope and fees are agreed before implementation.

Avoid passwords and confidential datasets. Your draft stays in this browser until you copy, download, or open it in your email app.

Open email app

Direct contact: contact@zariyalabs.com.np · Printable capabilities

Find a section

↑ ↓ navigate · Enter select · Escape close