Work / Selected projects

Working systems.
Evidence and limits made visible.

We use internal R&D to test our engineering approach in working systems. Each project starts with a defined problem, implements the essential functions, measures the result, and states what still needs to be validated.

01 / MAPPER

Active R&D · full pipeline tested with synthetic data · field validation pending

Turn an imperfect survey into
reviewable geometry.

Mapper combines repeated sensor observations from a manually driven survey to estimate landmark positions, course boundaries, a centerline, and uncertainty. It packages the result as an offline review file that operators can inspect and correct.

MAPPER / OVERVIEW From survey observations to reviewable course geometry.

The first panel shows a vehicle following an imperfect path while repeatedly observing course markers. The second shows Mapper’s reconstructed boundaries and derived centerline.

01 / SURVEY

What the vehicle records

VEHICLE PATHSURVEY VEHICLE

The vehicle may weave, reverse, follow one edge, or make multiple passes. Each frame contains sensor observations and an estimated vehicle pose. Mapper uses both to reconstruct the course; the route driven is not itself the course.

02 / RECONSTRUCTION

What Mapper produces

OBSERVED COURSE EDGESDERIVED CENTERLINE

Mapper estimates marker positions and course boundaries, derives a centerline, and reports uncertainty so an operator can inspect and correct the result.

Key design decision: The vehicle path tells Mapper where each observation was made; the observed landmarks define the course.

HOW IT WORKS

The vehicle path positions observations—it does not define the course.

Mapper converts each observation from vehicle coordinates into a common map frame. It then associates repeat sightings of the same marker, estimates marker positions, and fits the course boundaries and centerline. Because the driven path only positions the observations, the operator does not need to follow the eventual centerline.

Capture
Vehicle pose and motion, imagery, calibration, and timestamp quality
Estimate
Marker positions, boundaries, centerline, width, relative elevation, and uncertainty
Review
One offline file with data provenance, quality flags, and operator edits
Marker recall (1 m threshold)0.80–0.99Synthetic fixtures
Median landmark error0.29–0.43 mSynthetic fixtures
External review resourcesNoneSingle-file review

These measurements come from nine synthetic driving scenarios, not field trials. The end-to-end pipeline is implemented, but field accuracy has not yet been measured. The current pipeline also produces 1.1–2.3 times as many landmark estimates as there are markers. Version 1 uses manual vehicle control; autonomous survey planning has been evaluated only in simulation.

02 / EVENT PLATFORM

Working development system · synthetic test data only

Run event operations without
building a participation history.

The platform handles registration and event operations while reducing the data that can be linked across events. Passkeys handle sign-in. A client-encrypted vault lets participants reuse their information, while event-specific sharing and separate keys and policies limit what each service can access. This development system demonstrates the architecture and core workflows; it has not yet been evaluated for production security, availability, or regulatory compliance.

TRUST BOUNDARIES / DATA MOVEMENT Authentication and reusable data remain separate
01 / PARTICIPANT DEVICE
PasskeyAuthentication only; no reusable profile data
Encrypted vaultReusable information stays under participant control
02 / EVENT SCOPE
Event recordOnly the fields required for this event
Scoped to one event
03 / SERVICE BOUNDARY
Service roleAccess granted for a defined operation
Transit policyEncryption keys separated by purpose
NOT CREATEDCross-event participation indexNo central record maps one participant across events.

KEY DESIGN CHOICE

Keep sensitive relationships out of the server-side data model.

The server does not maintain a central record linking each participant to every event. Participants keep reusable information in a client-encrypted vault and share only the fields an event requires. Separate service roles and encryption policies limit who can decrypt each category of data.

01

No central event history

Participants keep reusable information in an encrypted vault; the server does not keep a cross-event participation map.

02

Verify eligibility without storing source documents

An organizer can record the result of an eligibility check without storing the source document or its identifier.

03

No plaintext fallback

If the encryption service is unavailable at startup, the application stops rather than bypassing encryption.

04

Consistent sharing rules across operations

Registration, waivers, payments, check-in, scheduling, staffing, and results follow the same rules for which data an event receives.

RustPostgresOpenBao TransitPasskeysEvent-specific sharing

WHAT THE WORK DEMONSTRATES

Architecture decisions backed by working code.

These projects force architecture choices into working code, where integration problems become visible and results can be measured. We show both the evidence and the current limits so prospective partners can judge our work on its merits.

Working on a related system?

CONTACT

Need help designing, prototyping,
or testing a complex system?

Tell us what the system must do, what exists today, the constraints that matter, and when you need a result.

[email protected]