What I take on, what it costs, how to start.
A small number of engagements per quarter, in the six areas below. The price ranges are real — meant for you to self-qualify before the call. Exact scope and quote on a 30-minute discovery.
Six lanes. Each tied to a project you can audit.
The reference column is the proof. If the reference doesn't fit your problem, the engagement probably doesn't either.
Web-scale data & OSINT
Custom scraping, structured extraction, AI categorization at scale. End-to-end pipelines from acquisition through enrichment, deduplication, and search.
AI-native infrastructure & Go backends
Multi-tenant systems, self-hosted stacks on Hetzner / Proxmox / Kubernetes, MCP-aware tooling, JWT / OAuth2, tenant isolation, rate limiting.
ADR-driven architecture reviews & team coaching
One-week audit producing a written architecture report and an adopted decision-log practice your team will actually keep using after I leave.
Application & cloud security review
Vulnerability discovery, threat modeling, OWASP API Top 10 audit, responsible-disclosure consulting (ISO 29147), GDPR-aligned breach-report prep.
Civic tech & investigative-data partnerships
FOIA infrastructure, election monitoring, watchdog data pipelines. Project- or grant-shaped. Reduced rates for non-profits — ask.
Experience design & curated convenings
Castle retreats, coliving houses around tentpole events, Davos-style cross-community activations. Production-led, programming-first.
Ranges are indicative for typical scope. Enterprise engagements, multi-quarter retainers, and equity-component arrangements are quoted separately on call. NGOs and civic clients — ask about reduced rates.
Discovery. Scope. Delivery. Documented.
Discovery (free, 30 minutes). A scoped call. I ask what's broken, what you've tried, and who else is in the room. If it's not a fit, I’ll tell you and try to refer you to someone who is.
Scope (paid, fixed-fee). A short paid engagement — usually one to two weeks — that produces a written brief: the problem, the chosen approach, the alternatives I rejected and why, the cost, the timeline, and the receipts I’ll deliver. This is the ADR practice applied to commercial work. The brief is what we sign against.
Delivery. Weekly written updates. A public-or-private decision log. Code, infrastructure, and documents land in your repository, not mine. At the end you own everything, including the operational knowledge — that’s the entire point of the practice.
Selected client engagements.
- World Bank — Kasai Health Region mapping, Democratic Republic of Congo. 200,000 buildings, 2022. UPI #465044.
- World Bank — Urban slum mapping, Romania. 2014 consultancy.
- RISE Project — multi-year collaboration on investigations, data, and infrastructure. Also worked with their Journalist House. Bylines & mentions →
- OCCRP — collaboration with Paul Radu, data cleaning.
- Friedrich Naumann Foundation — Subject and contributor, Think Freedom: The Firestone documentary (2025).
- House of Collaboration · Davos 2026 — Tech Director. 200+ attendee reception, 60-person closing dinner.
- Telenav — Senior Map Analyst. Trained and onboarded a team of 30 map analysts.
- OneRecord — built more than half of their map-related data ingestion infrastructure.
- Bolt — prior engineering client.
- Standing workshop catalog — Six named workshops, ~99 deliveries to government, business, and civic-sector clients. Past participants include staff from Google and Bolt.
Thirty minutes. No deck. Tell me what's broken.
Email florin@badita.org → or Pick a slot on Cal.com →
Not a fit but know who is? Forward this — I owe you one.