<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Sanduni Pavithra</title>
    <description>The latest articles on DEV Community by Sanduni Pavithra (@sanduni_pavithra).</description>
    <link>https://dev.to/sanduni_pavithra</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4084762%2Fef68cb3c-aeae-4be8-bac4-7be9075dc7ea.png</url>
      <title>DEV Community: Sanduni Pavithra</title>
      <link>https://dev.to/sanduni_pavithra</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/sanduni_pavithra"/>
    <language>en</language>
    <item>
      <title>How I Approach a New Software Project: From Idea to Deployment</title>
      <dc:creator>Sanduni Pavithra</dc:creator>
      <pubDate>Wed, 19 Aug 2026 11:17:26 +0000</pubDate>
      <link>https://dev.to/sanduni_pavithra/how-i-approach-a-new-software-project-from-idea-to-deployment-2p7j</link>
      <guid>https://dev.to/sanduni_pavithra/how-i-approach-a-new-software-project-from-idea-to-deployment-2p7j</guid>
      <description>&lt;p&gt;When I start a new software project or take on client work through my freelance development services (you can view my gig &lt;strong&gt;&lt;a href="https://www.fiverr.com/s/lr97jwA" rel="noopener noreferrer"&gt;here&lt;/a&gt;&lt;/strong&gt;), I don’t begin by choosing a framework.&lt;/p&gt;

&lt;p&gt;I start with two questions:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What problem am I actually solving?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;And:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;What is the one thing I cannot afford to get wrong?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;I learned this while building a multi-tenant SaaS product end to end, and while delivering real-world client projects through freelance work.&lt;/p&gt;

&lt;p&gt;I was involved in everything from understanding requirements and designing architecture to writing code, testing, and deployment.&lt;/p&gt;

&lt;p&gt;That experience completely changed how I approach software.&lt;/p&gt;

&lt;p&gt;This is the process I follow now whether I’m building my own system or working with clients.&lt;/p&gt;




&lt;h2&gt;
  
  
  1. Understand the problem before writing code
&lt;/h2&gt;

&lt;p&gt;Before I write a single line of code or even start a client project, I try to simplify the problem.&lt;/p&gt;

&lt;p&gt;I want to understand:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Who actually has this problem?&lt;/li&gt;
&lt;li&gt;What are they doing today?&lt;/li&gt;
&lt;li&gt;What is frustrating or inefficient?&lt;/li&gt;
&lt;li&gt;What is the minimum the product must solve first?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Then I identify the biggest constraint.&lt;/p&gt;

&lt;p&gt;For a multi-tenant application, that constraint was &lt;strong&gt;tenant isolation&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;One customer’s data must never leak into another customer’s data.&lt;/p&gt;

&lt;p&gt;It affects everything:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Authentication&lt;/li&gt;
&lt;li&gt;Authorization&lt;/li&gt;
&lt;li&gt;Database queries&lt;/li&gt;
&lt;li&gt;Middleware&lt;/li&gt;
&lt;li&gt;Sessions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If you miss this early, you can build something that works but becomes painful to fix later.&lt;/p&gt;

&lt;p&gt;So instead of asking:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;“Which framework should I use?”&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;I ask:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;“What is the most dangerous thing that can go wrong?”&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;That question matters more than technology.&lt;/p&gt;




&lt;h2&gt;
  
  
  2. Keep the first version small
&lt;/h2&gt;

&lt;p&gt;I don’t try to build everything at once.&lt;/p&gt;

&lt;p&gt;I focus on the &lt;strong&gt;smallest complete end-to-end workflow&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;For example:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;User registration&lt;/li&gt;
&lt;li&gt;Admin panel&lt;/li&gt;
&lt;li&gt;Tenant workspace&lt;/li&gt;
&lt;li&gt;Roles and permissions&lt;/li&gt;
&lt;li&gt;One working flow&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;I avoid unnecessary features early.&lt;/p&gt;

&lt;p&gt;I prefer:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;one complete working system&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;over&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;many incomplete features&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;This keeps development focused and practical.&lt;/p&gt;




&lt;h2&gt;
  
  
  3. Think about architecture before UI
&lt;/h2&gt;

&lt;p&gt;UI is easy to change. Architecture is not.&lt;/p&gt;

&lt;p&gt;So I think about:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;How is tenant identity handled?&lt;/li&gt;
&lt;li&gt;Where does data live?&lt;/li&gt;
&lt;li&gt;How is authentication done?&lt;/li&gt;
&lt;li&gt;Where is authorization enforced?&lt;/li&gt;
&lt;li&gt;What happens when context is missing?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;For SaaS systems, I used a monolithic structure with strict boundaries and schema per tenant isolation.&lt;/p&gt;

&lt;p&gt;The goal is not complexity.&lt;/p&gt;

&lt;p&gt;The goal is clarity:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Who can access what, and how is it enforced?&lt;/strong&gt;&lt;/p&gt;




&lt;h2&gt;
  
  
  4. Choose a stack I can maintain
&lt;/h2&gt;

&lt;p&gt;Every technology has a cost:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Debugging&lt;/li&gt;
&lt;li&gt;Deployment&lt;/li&gt;
&lt;li&gt;Maintenance&lt;/li&gt;
&lt;li&gt;Updates&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;So I follow a simple rule:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;Don’t add technology because it exists. Add it because it solves a real problem.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;If a monolith works, I keep it.&lt;/p&gt;

&lt;p&gt;If a managed service is reliable, I use it.&lt;/p&gt;

&lt;p&gt;The goal is to ship and maintain, not over-engineer.&lt;/p&gt;




&lt;h2&gt;
  
  
  5. Build the golden path early
&lt;/h2&gt;

&lt;p&gt;Instead of building layers separately, I build the &lt;strong&gt;full user flow first&lt;/strong&gt;:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;Discover → Register → Approve → Activate → Use
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;This ensures everything connects early.&lt;/p&gt;

&lt;p&gt;It quickly reveals missing pieces and broken assumptions.&lt;/p&gt;




&lt;h2&gt;
  
  
  6. Make security part of the release
&lt;/h2&gt;

&lt;p&gt;Security is not a later step. It is part of “done.”&lt;/p&gt;

&lt;p&gt;I always include:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Role-based access control&lt;/li&gt;
&lt;li&gt;Tenant isolation checks&lt;/li&gt;
&lt;li&gt;Server-side validation&lt;/li&gt;
&lt;li&gt;Fail-closed behavior&lt;/li&gt;
&lt;li&gt;Cross-tenant tests&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If a security issue can happen silently, I want tests to catch it early.&lt;/p&gt;




&lt;h2&gt;
  
  
  7. Onboarding is part of the product
&lt;/h2&gt;

&lt;p&gt;A product is not just features. It is the journey before usage.&lt;/p&gt;

&lt;p&gt;Example flow:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight plaintext"&gt;&lt;code&gt;Registration → Approval → Payment → Activation → Workspace
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Each step has meaning.&lt;/p&gt;

&lt;p&gt;This makes system state clear and predictable.&lt;/p&gt;




&lt;h2&gt;
  
  
  8. Deploy early
&lt;/h2&gt;

&lt;p&gt;I don’t wait for perfection.&lt;/p&gt;

&lt;p&gt;I deploy early because real environments reveal real problems:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Config issues&lt;/li&gt;
&lt;li&gt;Auth mismatches&lt;/li&gt;
&lt;li&gt;Build errors&lt;/li&gt;
&lt;li&gt;Production-only bugs&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Even client projects benefit from early deployment.&lt;/p&gt;




&lt;h2&gt;
  
  
  Before I call it ready
&lt;/h2&gt;

&lt;p&gt;I ask:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Are core workflows complete?&lt;/li&gt;
&lt;li&gt;Is tenant isolation enforced?&lt;/li&gt;
&lt;li&gt;Are permissions tested?&lt;/li&gt;
&lt;li&gt;Can failures be debugged?&lt;/li&gt;
&lt;li&gt;Is onboarding clear?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If not, it is not ready.&lt;/p&gt;




&lt;h2&gt;
  
  
  What I’ve learned
&lt;/h2&gt;

&lt;p&gt;A few principles always stay the same:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Start with the hardest constraint&lt;/li&gt;
&lt;li&gt;Build one complete workflow first&lt;/li&gt;
&lt;li&gt;Enforce boundaries in architecture&lt;/li&gt;
&lt;li&gt;Test critical assumptions&lt;/li&gt;
&lt;li&gt;Treat onboarding and deployment as part of the product&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Most importantly:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;Don’t optimize for complexity. Optimize for clarity.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;This is the same mindset I use for both SaaS products and client work through my freelance services (&lt;strong&gt;&lt;a href="https://www.fiverr.com/s/lr97jwA" rel="noopener noreferrer"&gt;Fiverr gig&lt;/a&gt;&lt;/strong&gt;).&lt;/p&gt;

&lt;p&gt;Tools will change.&lt;/p&gt;

&lt;p&gt;But clarity in thinking always wins.&lt;/p&gt;




&lt;p&gt;How do you approach a new project?&lt;/p&gt;

&lt;p&gt;What do you make sure is right before anything else?&lt;/p&gt;

</description>
    </item>
  </channel>
</rss>
