BONVO

Selected Work

Engagements & track record.

Much of Bonvo's work is bound by confidentiality — the clients include governmental, defence, and infrastructure organisations. What follows describes the shape of the work and the real numbers behind it. No invented logos, no inflated metrics.

SENIOR ENGINEER, ARCHITECTURE & PLATFORM · CONTRACT INTELLIGENCE / GOVTECH · 2023–PRESENT

Replacing a live async substrate — without stopping the platform

A contract-intelligence platform serving governmental, defence, and infrastructure clients — multi-billion-dollar post-execution obligation programs where a single missed clause-driven deadline can trigger eight-figure liquidated damages. The platform’s background-job system ran on a legacy XMLRPC/TGScheduler jobserver that had become the primary reliability risk.

Gergely designed and shipped a managed Celery framework to replace it: 10,787 lines of code across 42 files, porting 50+ legacy jobs with multi-tenant context restoration, migrated live with no maintenance window. Two years on, he remains the runtime owner.

By the numbers — 10,787 LOC · 42 FILES · 50+ JOBS PORTED · 2 YRS RUNTIME OWNERSHIP · 0 DOWNTIME CUTOVERS

SENIOR ENGINEER · CONTRACT INTELLIGENCE / GOVTECH · 2023–PRESENT

Rewriting a core workflow, eight versions deep

On the same platform, the core checkout-status workflow — the mechanism controlling document state across the system — was rewritten end to end: ten months, eight iterated versions, spanning a Python/SQLObject backend and ExtJS and Angular front ends. The work is a study in modernising inside a living legacy system: each version shipped, verified, and superseded without breaking the tenants running on it. Alongside it: recurring production incident command for DB-lock and stuck-job classes, including hot-fixing a production database lock-up.

By the numbers — 10 MONTHS · 8 SHIPPED VERSIONS · 3 UI/BACKEND STACKS BRIDGED · RECURRING INCIDENT COMMANDER

VULNERABILITY RESEARCH · SECURITY / ISO 27001 · 2023–PRESENT

Four pre-disclosure security reports in thirty days

A self-initiated security research sprint on a production platform produced four pre-disclosure reports in 30 days: a subdomain takeover; a CSRF weakness rooted in Mersenne-Twister PRNG predictability; an SMS-MFA-bypass account-takeover chain; and a leaked-credential audit. Each was written to pre-disclosure standard and framed for the organisation’s ISO 27001 processes — findings an external pentest had not surfaced.

By the numbers — 4 REPORTS · 30 DAYS · ATO CHAIN + PRNG CSRF + SUBDOMAIN TAKEOVER + CREDENTIAL AUDIT

AI ENGINEERING · LLM / MCP / DEVELOPER TOOLING · 2023–PRESENT

An applied-AI practice that pays for itself

Building AI into an engineering organisation, not a demo: a Claude Code slash-command suite running in production; an MCP evidence pipeline; and a 1,000-merge-request review-corpus analysis that identified the recurring feedback patterns and produced a pre-merge tooling proposal automating roughly one sixth of them. The underlying personal footprint on the platform: 200 merge requests at a 61.5% merge rate, 138 tickets, 17+ initiative branches owned end to end.

By the numbers — 1,000 MRS ANALYSED · ~1/6 OF REVIEW FEEDBACK AUTOMATED · MCP PIPELINE IN PRODUCTION

BACK END DEVELOPER · HEALTH DATA / INTERNATIONAL ORGANISATIONS · 2021–2022

Health-sector data platforms for WHO & UNICEF stakeholders

At Pulilab, work for WHO and UNICEF stakeholders: a Scrapy-based data-enrichment pipeline covering 20,000+ medical clinics; analytics over 100,000+ datapoints with city-, country-, and global-level aggregation, geolocation, and statistical outlier detection; a 1.5-million-word CMS; and — notably — an OpenAI-powered content-strategy system with A/B testing shipped in 2021–22, before ChatGPT existed.

By the numbers — 20,000+ CLINICS · 100,000+ DATAPOINTS · 1.5M-WORD CMS · LLM IN PRODUCTION PRE-CHATGPT

CO-FOUNDER & CEO · AI / URBAN TRAFFIC / B2G · 2018–2021

Founding and leading an AI GovTech company

Venturi Systems built AI-driven urban traffic optimisation. As co-founder and CEO, Gergely secured two B2G contracts through 30+ municipal meetings, optimised 16 intersections across 3 municipalities, and served as Product Owner for an external EPAM design team. The engineering core: distributed simulation of 3,000,000+ data points across 140 simulated years on GCP 96-core instances, with ML-accelerated optimisation. The formative years before that: four years of large-scale Magento eCommerce on a 130,000-product catalog, and 12+ freelance client projects delivered end to end — including a cross-platform PWA newspaper with subscriptions and payments.

By the numbers — 2 B2G CONTRACTS · 16 INTERSECTIONS / 3 MUNICIPALITIES · 3M+ SIMULATED DATA POINTS · 140 SIMULATED YEARS

The Long Game

Architecture-grade output, sustained for years.

A git-history analysis across ~150 repositories shows the pattern behind the engagements: 765 authored commits over 133 active weeks on a single ~16,000-function production codebase; a personal product of ~138,000 hand-written source lines and 2,561 functions (Bonvo Ski Maps — offline 3D maps for 1,400+ resorts); and a 110,000-line application built in a three-and-a-half-month sprint. The same capacity, applied to your system.

The numbers — 765 COMMITS / 133 WEEKS · 138K LOC PERSONAL BUILD · 110K LOC IN 3.5 MONTHS

What Colleagues Say

He was always the person we called when something went wrong in production… led the effort to clean up and modernize our old Python codebase… One of the best engineers I have worked with.
Krisztián Katona/Lead Developer, Affinitext
We'd sit down, map out exactly what was needed, and agree on the best communication mechanisms and design patterns before diving in. Our collaboration was always smooth sailing.
Razvan Gantu/Front-End Angular Architect, Affinitext

Your system could be the next entry.

Response within one business day · Budapest (CET) · Remote-first, worldwide