I engineered a production-grade API governance platform to solve manual review bottlenecks within a leading private banking institution. The system replaces slow, manual validation workflows with an automated, score-based Governance Gate that ensures all API specifications comply with enterprise security and architectural standards before reaching production.

The platform manages the full API lifecycle, from initial YAML upload to automated deployment in WSO2 API Manager. By integrating AI-driven analysis, the system provides real-time feedback, structural linting, and semantic intent detection to prevent redundant or non-compliant APIs from entering the ecosystem.

Achievements:

Reduced manual validation effort by 60% by implementing an automated, four-stage validation pipeline.

Integrated AI-powered validation using a local Qwen 2.5 LLM to provide automated code-level fixes and structural optimization.

Built a custom Governance Gate that enforces Microsoft REST API guidelines and prevents duplicate API entries via vector similarity search (PGVector).

Designed a full-stack dashboard (React + FastAPI) featuring automated diff views, PDF/CSV compliance reporting, and real-time operational monitoring via Prometheus and Grafana.

Tech Stack: FastAPI (Python), React.js, PostgreSQL (PGVector), Ollama (Qwen 2.5), WSO2 API Manager, Docker, Prometheus, Grafana.