Skip to content
View volodymyrshk's full-sized avatar
👨‍💻
Open to work
👨‍💻
Open to work

Block or report volodymyrshk

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
volodymyrshk/README.md

Volodymyr Shkarban

Backend & integrations engineer · TypeScript, Node.js, PostgreSQL

I build payment workflows and API integrations, and I like getting to the bottom of what happens when things go wrong: duplicate events, timeouts after a write, missed webhooks and incompatible dependencies.

In production, I've worked on Stripe and Adyen onboarding, payment reconciliation, tenant-scoped access and the APIs and data models behind a fintech platform. I also build and test AI-agent security tools and have worked on adversarial model evaluations.

Open to remote engineering roles and contracts. Email me · Portfolio · LinkedIn · Book a call

Work accepted upstream

  • OpenTelemetry JS #7259 · merged. Found a dependency compatibility problem that caused OTLP exporters and instrumentations to fail to load with a permitted API version. Mapped the affected packages and opened the fix; maintainers extended it before release.
  • Kestra #19659 · merged. Added optional HMAC signature validation for webhook triggers, verifying the original request bytes and covering failure cases with tests.
  • Langfuse JS #1077 · merged. Traced a fresh-install failure to incompatible OpenTelemetry exporter peer ranges and fixed the SDK 2.x dependency constraints.
  • ckanext-files #15 · merged. Fixed CI, added CKAN 2.12 to the test matrix, and improved migration re-runs and transfer-history handling.
  • E2B AI Analyst #43 · merged. Updated the model catalogue and default while accounting for the existing SDK's behavior.

I also reported missing destructive-action annotations in CircleCI's MCP server: CVE-2026-95854, fixed in version 0.18.0. My Langfuse v4 experiment API proposal for tRPC Agent Go is open and in review.

Start with the code

These are independent reference projects, not claims of production deployment:

If you're working on… Code to inspect What it demonstrates
Payments and webhooks stripeprocessing Stripe signature verification, duplicate handling, PostgreSQL and CRM sync.
AI workflows that write to business systems agent-reconciliation-harness Validated proposals, a policy gate, a durable outbox and a synthetic evaluation set.
GitHub integrations github-push-reconciler Signed webhooks, coalesced work and recovery from missed events.
Secrets and configuration sync redaction-safe-sync Explicit remote-value states, versioned writes and property tests.

More pull requests and their status · CircleCI write-up · Coordinated disclosure to 10 MCP vendors

Tools I work with

Backend & data: TypeScript, Node.js, Python, PostgreSQL, Redis, REST and webhooks
Payments: Stripe Connect, Adyen, reconciliation and idempotency
Observability: OpenTelemetry JS, OTLP and Langfuse
AI & security: MCP, tool authorization, adversarial evaluation and reproducible tests
Delivery: React, Next.js, Docker, AWS and GitHub Actions

BSc in Applied Mathematics, National Aviation University, Kyiv. English, Ukrainian, Russian and German.

Pinned Loading

  1. github-push-reconciler github-push-reconciler Public

    Recover missed GitHub webhooks: signed receiver, coalescing worker and budgeted reconciler. Runnable TypeScript reference and failure simulation.

    TypeScript

  2. redaction-safe-sync redaction-safe-sync Public

    Keep redacted secrets from overwriting real values. Five-state TypeScript sync model with versioned writes and property tests. No dependencies.

    TypeScript

  3. agent-reconciliation-harness agent-reconciliation-harness Public

    Payment-reconciliation agent reference: validated proposals, human review, durable outbox and crash recovery. Runnable TypeScript demo and synthetic evals.

    TypeScript