Matthew Myers Builds

Matthew Myers

AI-Native Product Engineer / Full Stack Developer / Systems Builder

I build operational software systems, workflow-driven SaaS products, and AI-native product experiences.

AI-native engineering

AI is leverage, not a replacement for engineering judgment. I use it to compress the distance between an idea and a working system, then apply the same architectural rigor I always would.

Operator Background

My technical ability grew out of a desire to solve real operational and human problems.

Before I wrote software, I spent more than ten years in sales, sales leadership, and operations. I managed retail teams at Verizon, ranked among the top performers at the sales-tech startup Outreach.io, delivered financial solutions at OneMain, and rose to Director of Sales at the SaaS company Ingeniux. Today I also run Hacktivist Golf, an indoor golf and simulator venue, where I launched a second location from demolition to opening day. That is where the engineering started. I was living the operational friction every day, so I built the software to fix it. Simbook, SimPull, and Golf Kiosk are operator-built tools for the exact business I run, which is why my software comes out operational, workflow-driven, and grounded in how a real venue actually works.

Selected projects

SimPull (Building)

Venue management OS for sim racing

A full-stack venue management system for commercial sim racing. SimPull runs the session lifecycle across a network of rig PCs: customer kiosk, real-time rig control over a WebSocket bus, content sync for 600+ cars, analytics, backups, offline license keys, and a federated multi-tenant hub. Built offline-first with zero cloud dependency for core operations.

Capabilities

  • Real-time rig agents launch and kill Assetto Corsa per session
  • Offline-first: sessions, leaderboards, backups, and licensing run with no internet
  • Pull-based content distribution to every rig with no network shares
  • Federated multi-tenant hub monitoring all deployed venues
  • Zero-dependency Stripe payment gate and HMAC license keys
  • Role-based staff portal, analytics, and automated backups

Stack: React, TypeScript, Node.js, Express, SQLite, WebSockets

Case study: Venue management operating system for commercial sim racing.

Systems and architecture
  • Hub and spoke with local autonomy. Each venue runs standalone. Sessions launch, leaderboards persist, backups run, and licenses validate entirely offline. The central hub is additive telemetry, never a dependency.
  • The rig agent as a command bus. Each rig PC runs a lightweight agent on a persistent socket. The server sends typed commands and the agent owns the machine, launching and killing Assetto Corsa and pulling content. Adding a rig is install the agent and point it at the server.
  • Offline-first licensing. HMAC-SHA256 keys encode venue, expiry, tier, and rig limit, validated with a shared secret and no network call. A trial mode with a two-rig limit means zero friction to start.
  • Content distribution without network shares. The server zips content on demand with mtime-based caching and serves it over HTTP. Each rig pulls and extracts into the right paths, so sync works on any network with no configuration.
  • Multi-tenant by federation. Venues register and send heartbeats to a stateless hub. Each venue owns its data, and the product company gets visibility across hundreds of installs from a small server.
  • Dependency restraint. Stripe over raw HTTPS, content zipping over PowerShell, license validation over the built-in crypto module. Every dependency not added is one fewer failure mode in production.
Technical highlights
  • Rig agent architecture. Lightweight Node agents on each Windows PC hold persistent sockets, manage the Assetto Corsa process lifecycle, and respond to typed command messages. This is practical distributed systems work.
  • Offline-first by design. Local SQLite, offline license validation, and standalone operation when the hub is unreachable. The venue keeps running when the connection does not.
  • Content distribution system. An mtime-cached, pull-based pipeline zips 600+ cars and tracks on demand and extracts them on every rig, with per-rig progress and no network shares required.
  • Federated multi-tenant hub. Each venue phones home every 60 seconds to a stateless hub with an online and offline dashboard across all deployments, preserving each venue's autonomy.
  • Zero-dependency Stripe. A full kiosk payment gate built on the Node HTTPS module and URLSearchParams, with no payment SDK in the dependency tree.
  • Process and multiplayer control. Launching and killing AC and a dedicated acServer, joining rigs via race.ini injection, and a watchdog that handles reconnection.
  • Production data management. Automatic daily SQLite backups with labeled manual snapshots and 14-backup retention, sized to a real two-week recovery window.
  • Ten-minute install. An install script and a single-click start with a git pull update path get a new venue running fast on a clean Windows machine.
  • Offline license keys. HMAC-SHA256 keys encode venue, tier, expiry, and rig limit, validated locally with a shared secret and no server round trip.

Golf Kiosk v1 (Scaling)

Self-service golf simulator kiosk

A self-service kiosk that turns a golf simulator bay into an unattended retail surface. Players book, extend, and pay without staff, while the system enforces session limits and hands off cleanly to the simulator software. Designed from day one for white-label deployment across multiple locations.

Capabilities

  • Simbook integration for booking and session state
  • Trackman workflow support for live simulator handoff
  • QR booking and in-session extension flows
  • Session enforcement with automatic time governance
  • White-label deployment strategy per venue brand
  • Multi-location rollout thinking baked into config

Stack: Next.js, TypeScript, API Integrations, Tailwind, Vercel

Simbook (Live)

Operational control system for simulator venues

A multi-tenant SaaS platform for golf and sim-racing venues, live and revenue-generating since December. Simbook collapses booking, payments, self-service kiosks, league management, and physical hardware orchestration into one operator surface, backed by a defense-in-depth authorization model and an atomic money path. It is now being migrated onto a hardened, security-audited build.

Capabilities

  • Three surfaces: guest booking, operator dashboard, platform admin
  • Stripe Connect payouts, per-station subscriptions, idempotent refunds
  • Self-service kiosks with revocable per-station credentials
  • PC-side auto-launch agent that starts and stops racing rigs
  • Row Level Security, table grants, and definer RPCs as three layers
  • Atomic wallet and gift-card redemption with rollback

Stack: React, TypeScript, Vite, Supabase, PostgreSQL, Stripe Connect

Live site: simbook.io

Case study: Operational control system for commercial simulator venues.

Systems and architecture
  • Defense in depth, not one check. RLS, table grants, and definer RPCs each play a distinct role. A pass caught six tables with policies defined but Row Level Security disabled, leaving player names, emails, and handicaps silently exposed. The fix enabled RLS and added scoped anon reads only for non-PII display.
  • RPC as a security boundary. Account membership has no blanket insert. A least-privilege definer RPC is the only path to create an account and bind the creator as owner, and it grants owner only, never platform super admin.
  • Migration drift as operational risk. A partially applied prior migration left a table with RLS on and zero policies, silently breaking an admin token UI. The reconcile migration restores the function and policy idempotently so staging and production converge.
  • Environment isolation by default. Config points at staging, so a command missing its project ref lands somewhere harmless. The front end guards staging against production refs, and the cutover runbook makes the safe path the default path.
  • Atomicity in the money path. Wallet and gift-card redemption moved from client-side multi-writes into a single atomic Postgres function, with a rollback that reverses redemptions if the booking fails.
  • Search-path hardening. SET search_path = public on every definer function closes a known privilege-escalation vector, including the one function that was missing it.
Technical highlights
  • Three-layer authorization. RLS, Postgres table grants, and SECURITY DEFINER RPCs each play a distinct role. Knowing which layer a failure belongs to turns permission denied into a precise fix.
  • The unenforced-policy catch. Six tables carrying names, emails, and handicaps had policies defined but Row Level Security disabled, leaving them silently open. Enabling RLS with scoped reads closed the exposure without breaking the public page.
  • Atomic redemption RPC. Wallet and gift-card redemption moved into one atomic Postgres function with rollback, removing a client-side multi-write race in the payment path.
  • Stripe Connect money flow. Venue payouts, per-station subscription billing, and idempotent refunds, with walk-in sessions verified against Stripe before they confirm.
  • Hardware auto-launch agent. A PC-side daemon launches the right scenario at session start and shuts it down at the end, authenticated by an opt-in heartbeat key that fails safe.
  • Edge function surface. Deno functions handle customer creation, walk-in confirmation, payouts, automations, and the agent heartbeat, with JWT verification configured per function.
  • Default-safe cutover. An environment guard and a runbook make staging the default target and backups a precondition, so a mistake lands in the harmless place.
  • Removing a single vendor. Automations and auth email moved direct to Resend to remove a host-locked email gateway as a failure mode.
  • CI as a gate. GitHub Actions runs a blocking typecheck and build, with a secret-gated edge-function test job, so broken code does not advance.

What I bring to teams

Skills and stack

Frontend Runtime

Next.js, React, TypeScript, Tailwind CSS, Zustand

Backend and Data

Supabase, PostgreSQL, API Integrations, OAuth Concepts

Systems and Product

Product Architecture, Workflow Automation, AI-Assisted Development, Vercel Deployment

The Shift: Why I Build

Technology used to belong mostly to the people who knew how to build it from scratch. The world we live in today was shaped by a small group of highly technical founders and engineers who had the ability to turn ideas into reality while most people could only imagine them.

AI changed that.

Now people with vision, creativity, systems thinking, and real ideas finally have access to the tools needed to build. You no longer need to be a world-class engineer to create meaningful products, solve problems, or make an impact.

For the first time, there's an entire generation of thinkers, operators, and innovators who can actually bring their ideas to life.

That shift is going to change everything.

I build for that generation, and alongside the people who feel it too.

Contact

Building something ambitious? Reach out.