NotaFlow
In productionOur first commercial product. Issues, copies and cancels service invoices (NFS-e) on Brazil's national system: open an invoice you already issued and issue an identical one, changing only what changed.
notaflow.vapulab.comSoftware engineering lab
B2B systems that have to be right.
Fast, auditable and hard to break. We render on the server, compile everything we can, and test in a real browser what others only test on paper.
Logic. Infrastructure. Perception.
In production
The method
Prove every engine inside a real product.
Only then does it become a platform. NotaFlow went from RFC to production in days, and almost every Vapulab engine already works inside it, in embryonic form.
Issuing real invoices on Brazil's national system, at notaflow.vapulab.com.
ose
The sync with the national system: every 30 minutes it reads every invoice and every event for each company, with a cursor and retries.
MORAX VAULT
The certificate vault: each client's digital certificate (ICP-Brasil A1) has its own data key, wrapped by a master key. No business row is ever deleted.
haborym
A complete fake of the tax authority's APIs (Sefin and ADN) for tests, every XML validated against the official XSD, and idempotent issuing: no invoice goes out twice.
FOCALORS SENTINEL
Prometheus, Loki and Grafana with alerts on Discord, Sentry, an external watchdog and the audit log.
The ecosystem
Internal engines, platforms and products. Every engine is proven inside a real product before it becomes a platform.
Product · by Vapulab
Its own brand, endorsed by Vapulab
Arcontes · platforms
What goes to market is drawn solid
MORAX VAULT
Persistence and contracts
Vault, immutable backups and transactions that must not fail. Powered by Vapula.
Early, internal
BUER GNOSIS
Market intelligence
Data mining and competitive analysis: turns raw data into a precise report. Powered by Ose and Vassaga.
Planned
BARBATOS GATEWAY
Distribution and interface
Interfaces in the client's brand, ready on the first byte. Built on Malphas.
Proof of concept
FOCALORS SENTINEL
Audit and observability
Every log, transaction and anomaly on a single dashboard. Backed by Haborym.
Early, internal
Goétia · internal engines
What is internal is drawn in outline
vapula
Logic
The backend core. Go, PostgreSQL with typed queries and versioned migrations. It runs this site today.
Foundation
ose
Perception
Workers that go out and fetch the data nobody has organized. Every 30 minutes they read every invoice and every event from the national system.
Running in NotaFlow
malphas
Structure
The design system. HTML comes ready from the server; keyboard, focus and ARIA tested in real Chrome.
In production
vassaga
Discovery
Indexing and analysis. Catalogs what Ose brings in, finds the pattern and anticipates the trend.
Planned
haborym
Ignition
Chaos, load and CI/CD. Attacks our own systems, with fakes and tests against the official XSD, so things break here, not in production.
Embryonic
How we build
No client-side framework, no Node build step, no CDN at runtime. What runs is what is in the binary.
Backend
Go compiled into a single binary, routed with chi. No runtime to install on the server, no middleman process between the request and the response.
Gochitempl
Persistence
PostgreSQL behind a pgx pool. The queries are real SQL, and sqlc generates the Go from them, so the compiler knows the schema. Versioned migrations with goose.
PostgreSQLpgxpoolsqlcgoose
Lean frontend
HTMX swaps HTML fragments the server already knows how to build. Alpine comes in only where the interaction is too local to be worth a trip to the network. Tailwind builds with its standalone CLI.
HTMXAlpine.jsTailwind