futhr:lab — selected work and research

A capital-efficient portfolio of platforms and open infrastructure for domains where software decisions carry operational, financial, or legal consequences.

The thesis: trust, interoperability, and unit economics are architectural constraints, not features added after scale. Across the portfolio, probabilistic intelligence sits above a deterministic foundation of durable state, explicit contracts, verification, and recovery. The full loop is designed as one: domain model, runtime, product, distribution, and operating model. Shared open-source cores reduce repeated engineering work and preserve customer control; commercial platforms monetize operation, assurance, and domain outcomes.

Bootstrapped by default, built for durable ownership.

A pure decision engine for products that need booking logic without adopting a booking platform. Availability, time zones, daylight-saving boundaries, capacity, resource assignment, validation, and lifecycle decisions remain deterministic and replayable. ExBooking owns no processes, providers, persistence, or hidden clock, leaving the host in control of customer data, payments, notifications, and experience. The library turns the hardest scheduling rules into a small, testable core that can support many vertical products without forcing them into one operating model.

The rules of scheduling, without the platform.

A notification compiler that moves template risk out of delivery time. Restricted MJML and Liquid become immutable, typed artifacts before reaching production, and runtime nodes render them in pure BEAM code without Node.js or an editor in the delivery path. Publication remains an explicit application decision. Syntax errors, unsafe behavior, and incompatible changes surface during authoring and review, while the artifact contract keeps every delivered message inspectable, versioned, and reproducible.

Compiled before delivery, never trusted at it.

A password generator built on a plain observation: a few independently chosen real words are easier to read, type, and remember than a short string of symbols, and length arrives naturally instead of through repetition. ExkPasswd turns that observation into a library with a public wordlist, strict configuration that rejects unknown, duplicate, or unsatisfiable options before anything is generated, and no runtime dependency beyond Erlang's own crypto module.

Every part of the shape belongs to the application: seven presets cover memorable defaults and compatibility constraints, custom UTF-8 dictionaries load at startup, transforms are a protocol with case handling, substitution, Pinyin, and Romaji built in, and a supervised registry composes named presets at runtime. Batch and parallel generation keep the same unbiased selection while cutting calls to the random source, and executable Livebook notebooks walk from the quick start to Chinese and Japanese dictionaries.

Words you can remember, rules you can read.

An open-source family of focused Elixir libraries for the W3C Web of Things and the edge-to-cloud continuum. IoT remains fragmented across vendors, protocols, and incompatible data models, so every product repeats the same description, discovery, and binding work and interoperability stays a promise on a diagram. WoTEx supplies shared terminology and contracts for describing a Thing's properties, actions, and events, validating Thing Descriptions, connecting protocol bindings, discovering Things, composing caller-owned runtimes, and keeping behavior consistent from cloud services to disconnected edge devices, with conformance testing against the published specifications and room for machine learning close to the device.

Each library follows OTP conventions: independently useful, explicit about ownership, and passive until the consuming application starts it. Nothing imposes a database, supervision tree, web framework, or proprietary platform on the host. The aim is shared infrastructure for the Elixir, Nerves, and industrial IoT communities, open enough to adopt without inheriting a platform and extensible toward future protocols and edge intelligence.

One standard for Things, and a runtime built to keep them running.

A Nexi Checkout integration built around authoritative payment state. Card and wallet data stay in the hosted checkout, while Solidus stores provider identifiers and financial outcomes verified at the source. Redirects and webhooks trigger retrieval instead of being accepted as proof. Authorization, capture, cancellation, refund, duplicate delivery, and uncertain responses each have an explicit state and recovery path. The operation set stays intentionally bounded to behavior the integration can model honestly.

Money moves on verified state, nothing less.

An open interchange model for authored interfaces moving between design tools, source code, runtimes, and agents. Stable identity and semantic operations preserve editability, while explicit loss records reveal what each adapter could not carry across a boundary. A deterministic Rust engine and conformance work turn fidelity into something testable rather than a visual judgment. The opportunity grows as autonomous systems begin editing real product interfaces across incompatible tools.

Loss made visible, fidelity made testable.

A headless billing engine for Elixir products that cannot afford drift between what the application believes and what the ledger says. External billing APIs push core commercial truth across a network boundary and leave teams with duplicate models and permanent reconciliation work. Rivure keeps subscriptions, usage, invoices, wallets, payments, and webhooks inside the host application's own data and transaction model, with provider effects handled as recoverable operations.

Unit economics as an architectural constraint: the margin is recorded in the same transaction as the feature that earned it, and every ambiguous provider outcome has a state instead of a support ticket. The engine is designed as open infrastructure; Rivure Cloud is the planned commercial platform for teams that want the same model with managed operations, administration, and regional deployment.

Billing that cannot drift from the product it bills.

A distributed commerce model for household resale without a central marketplace taking ownership of inventory, customers, or storefronts. Reloved Edge gives each household its own shop and operating surface, run at the edge instead of in a rented cloud, so a household can host a store without renting a separate server; Reloved Commons connects those shops through shared discovery while the sale and the buyer relationship stay local.

Both parts are planned as open source, so households can inspect the software and operate it independently. The result is the reach of a network with the control of independent ownership: a storefront with no server bill has no reason to charge rent, more useful goods stay in circulation without platform dependence, and trust and interoperability are designed into the protocol rather than rented from an intermediary.

Owned by the household, found by everyone.

A proxy-authorization and coalition platform for Swedish shareholders. Retail ownership is large in aggregate and powerless in practice: proxies are collected by hand, self-declared support is easy to dismiss, and the ten-percent threshold for calling an extraordinary general meeting under the Companies Act is rarely reached because nobody can prove who stands behind it. Äger makes every signed proxy, reminder, and dashboard total belong to one specific general meeting, and reports declared, validated, and meeting-eligible support as three separate figures so a campaign cannot be waved away for mixing claims with representation that holds up in the room.

A verified discussion forum per listed company gives coalitions a moderated place to organize before the vote, with evidence bundles that keep every authorization traceable. The product path runs from forum and voice toward trading and asset services, each step earning the next.

Ten percent is only a threshold when someone can prove it.