Software engineer · Kuala Terengganu, Malaysia

Muhammad Haziq Aiman Anuar

I build secure, production-oriented web systems, with applied AI and computer vision as a second field of work.

View MyConference Download resume

MyConference: ownership and problem

Featured project · Ongoing

Verified fact
MyConference is an ongoing, multi-tenant conference peer-review application. It covers the path from a call for papers and submission through reviewer assignment, review, decision, revision, and camera-ready upload.
Verified fact
I inherited an earlier prototype and led the current Laravel-based MyConference rebuild. I made the final product and engineering decisions while using AI-assisted development tools.
Verified fact
Multi-tenant peer review is the Portfolio's deepest evidence because it joins Organisations, Conference-scoped roles, confidential material, deadlines, and decisions in one application.
Verified fact
The verified implementation boundary is Laravel 13, PHP 8.3 or later, PostgreSQL 16 with forced row-level security, server-rendered Blade, Tailwind CSS, Alpine.js, Vite, PHPUnit against PostgreSQL, Node tests, and Playwright browser tests.
Verified fact
MyConference has a self-assessed WCAG 2.2 AA baseline and operates as an Authorized pilot.

MyConference: workflow

Featured project · Ongoing

Call for papers
The workflow opens with a call for papers.
Submission
A submission enters the peer-review record.
Reviewer assignment
Reviewer assignment connects that record to its reviewer.
Review
The review records the assessment for the submission.
Decision
A decision records the outcome of peer review.
Revision
Revision returns the submission for its next version.
Camera-ready upload
Camera-ready upload completes the record.

MyConference Conference overview at desktop width with fictional Clockwork Kites Guild data, four work items, three responsibility summaries, and 2099 deadlines. — Current Conference home at desktop width

MyConference Conference overview at phone width with fictional Clockwork Kites Guild data and the same 2099 work queue reflowed into one column. — Current Conference home at phone width

MyConference: safeguards and history

Featured project · Ongoing

Situation: Tenant data had to remain isolated across application and database access paths.
Choice: Every tenant table carries organisation_id; composite Conference and Organisation keys prevent mismatches; application scopes enforce the application boundary; and forced PostgreSQL row-level security protects raw queries.
Rationale: The application and database boundaries cover different access paths.
Result: Missing Organisation context returns no tenant rows, and cross-tenant requests return 404.

Verified fact

Every tenant table carries organisation_id to record its Organisation ownership.

Verified fact

Composite Conference and Organisation keys prevent mismatched pairs.

Verified fact

Application scopes enforce the application-layer tenant boundary.

Verified fact

Forced PostgreSQL row-level security protects raw queries.

Verified fact

Missing Organisation context returns no tenant rows.

Verified fact

Cross-tenant requests return 404.

Situation: Organisation ownership and access to confidential Conference material are separate responsibilities.
Choice: Organisation ownership does not grant confidential access. An audited Conference Chair Role Assignment grants it.
Rationale: Conference-scoped assignments keep privileged access explicit and reviewable.
Result: Confidential access follows the audited role assignment, not tenant ownership.

Verified fact

Organisation ownership does not grant confidential access; an audited Conference Chair Role Assignment does.

Situation: Operational corrections and revocations had to preserve the earlier record.
Choice: Decision corrections add new Decision rows, revoked role assignments preserve their original rows, and audit events cannot be updated or deleted.
Rationale: Append-only history keeps the sequence of actions available for audit.
Result: The current state can change without erasing the earlier decision, assignment, or event.

Verified fact

Decision corrections add new Decision rows.

Verified fact

Revoked role assignments preserve their original rows.

Verified fact

Audit events cannot be updated or deleted.

Diagram showing Organisation context and Eloquent scopes before forced PostgreSQL row-level security; tenant tables carry organisation_id, composite Conference and Organisation keys must match, missing context returns no rows, cross-tenant requests return 404, and ownership alone does not grant confidential access, which requires an audited Conference Chair Role Assignment. — Tenant isolation, in layers

Historical optimization

Measured on 29 August 2026

34.5% lower

Reduced MyConference's passing serial PHP test run from 1,013 seconds to 664 seconds by matching database reset strategies to test behavior, while retaining migration-backed checks for schema and privilege changes. Both comparison runs passed; fresh migrations fell from 120 to 14, tests changed from 1,218 to 1,147 after duplicate removal, and assertions changed from 11,081 to 10,986 after duplicate removal.

MyConference PHP test-suite optimization led by Muhammad Haziq Aiman Anuar within the current Laravel rebuild.

Academic projects

Applied AI and computer vision work completed at UiTM.

Academic project

Facial Action Unit Detection using ConvNeXt V2

Computer Vision Research Project · UiTM · 2026

Problem: Facial Action Unit Detection on DISFA.
Approach: Fine-tuned ConvNeXt V2 Base on DISFA with ImageNet-FCMAE pretraining, subject-disjoint three-fold cross-validation, and class-imbalance handling.
Outcome: Reported held-out means: 35.1% mean AU-F1 and 46.8% mean micro-F1.

ConvNeXt V2 Base
DISFA
ImageNet-FCMAE

Academic project

AI-Driven Automated Attendance Tracking System

Final Year Project · UiTM · 2024

Problem: Real-time attendance tracking through face detection and recognition.
Approach: A Python desktop system for real-time face detection and recognition, schedules, enrolment records, attendance logs, and attendance queries.
Outcome: Schedules, enrolment records, attendance logs, and attendance queries in one desktop system.

Python
OpenCV
Tkinter
YOLOv8n
FaceNet
MySQL

Experience & education

Selected roles and study following the project evidence.

Experience

Research Assistant
Universiti Teknologi MARA (UiTM)
Nov 2024 – Mar 2026Shah Alam, Selangor
Machine learning, deep learning, and computer-vision research; CNN and transformer testing; research or technical writing.
Software Engineer (On-the-Job Trainee)
TalentLabs / Mysoftcare
Jul 2024 – Nov 2024Kuala Terengganu, Terengganu
Laravel application development and maintenance; feature work, interface updates, and issue diagnosis.
System Engineer Intern
Kesatuan Kakitangan Akademik UiTM (MITASA)
Mar 2024 – Jun 2024Shah Alam, Selangor
Django and MySQL claim-management system using Python, Django, HTML, CSS, JavaScript, and Bootstrap, including testing, debugging, and deployment.

Education

Master of Science in Computer Science
Universiti Teknologi MARA (UiTM)
2024 – PresentShah Alam, Selangor
BSc (Hons.) Information Systems — Intelligent Systems Engineering
Universiti Teknologi MARA (UiTM)
2022 – 2024Shah Alam, Selangor

Let's talk about the work.

If this work is relevant to your team, email me.

Email me Download resume

Muhammad Haziq Aiman Anuar

Call for papers

Submission

Reviewer assignment

Review

Decision

Revision

Camera-ready upload

Facial Action Unit Detection using ConvNeXt V2

AI-Driven Automated Attendance Tracking System

Experience

Research Assistant

Software Engineer (On-the-Job Trainee)

System Engineer Intern

Education

Master of Science in Computer Science

BSc (Hons.) Information Systems — Intelligent Systems Engineering

Let's talk about the work.