FINITE

Windows Desktop Environment & Serialized Digital Object Platform

A customizable Windows desktop layer with interactive widgets, mini-apps, and a provable scarcity backend issuing serialized digital objects with offline-verifiable Ed25519 license leases.

System Visuals & Verification Evidence

1. The Engineering Problem

Traditional desktop customization tools (wallpapers, widgets, clocks) are either static, fragmented, or rely on speculative Web3 / NFT frameworks that alienate typical users. The goal was to build a cohesive native Windows workspace—FINITE Desktop—paired with a non-blockchain, one-way commercial infrastructure providing provable digital scarcity and atomic ownership for serialized functional desktop objects.

2. What Was Built

FINITE combines a native Windows application built with Tauri 2 (Rust + React) and a distributed Next.js 16 web platform backed by PostgreSQL on Supabase. Digital desktop objects (such as the Founder Clock with 1,000 supply, and Nocturne Chronograph with 100 supply at $4.00) are serialized atomically on the database. Active desktop instances verify signed Ed25519 leases locally without requiring continuous server connectivity.

3. System Architecture & Topology

ASCII Topology

A hybrid cloud/desktop topology: the web platform handles authentication, checkout (NOWPayments with HMAC validation), and cryptographic lease issuance. The desktop app stores encrypted leases in Windows DPAPI and verifies serial signatures locally via Rust ed25519-dalek.

+-----------------------------------------------------------------------+
|                             FINITE WEB                                |
|  Next.js 16 + React 19 (Vercel) <---> NOWPayments (HMAC Webhook)      |
+------------------------------------+----------------------------------+
                                     |
                                     v
+-----------------------------------------------------------------------+
|                          SUPABASE / POSTGRES                          |
|  - 5 Migrations + Row-Level Security (RLS)                            |
|  - Atomic Serial Number Allocation (#014 / 100)                       |
|  - Idempotent Payment State Machine                                   |
|  - 1 Active Device Entitlement Lease                                  |
+------------------------------------+----------------------------------+
                                     | Signed Ed25519 Lease
                                     v
+-----------------------------------------------------------------------+
|                        FINITE DESKTOP (Tauri 2)                       |
|  Windows App (Rust + React)                                           |
|  - Offline lease verification (ed25519-dalek)                         |
|  - Secure local credential vault (Windows DPAPI)                      |
|  - Embedded SQLite (rusqlite) + System telemetry (sysinfo)            |
|  - Desktop Layer: Draggable widgets, clock, focus timer, notepad      |
+-----------------------------------------------------------------------+

4. Mohamed's Personal Implementation

Designed and implemented the core monorepo architecture connecting web (Next.js 16), desktop (Tauri 2 / Rust), and shared TypeScript packages.

Wrote 5 PostgreSQL database migrations with strict Row-Level Security policies enforcing atomic serial allocation and preventing unauthorized access to private package downloads.

Engineered the cryptographic license subsystem: Ed25519 key-pair generation on the server, signed payload contracts, and offline verification inside the Rust desktop core.

Integrated NOWPayments with webhook signature validation, preventing duplicate entitlement grants via replay attacks.

Packaged the Windows installer using NSIS and MSI pipelines for seamless desktop distribution.

5. Engineering Challenges & Solutions

Challenge: Preventing Race Conditions During High-Demand Edition Drops

Solution: Implemented atomic PostgreSQL serial number generation using serialized isolation transactions and database constraints, ensuring two users cannot simultaneously claim the same edition serial number (#014/100).

Impact: Guaranteed 100% scarcity integrity without needing blockchain consensus overhead.

Challenge: Offline Desktop Verification Without Constant Telemetry

Solution: Devised a time-bounded cryptographic lease protocol: the web server signs a lease payload with an Ed25519 private key, and the Rust client verifies it against the embedded public key, caching state in Windows DPAPI.

Impact: Users retain full widget functionality when disconnected from the internet.

6. Technology Stack

Desktop Core

Tauri 2Rustrusqlitesysinfoed25519-dalekwindows-sys DPAPI

Web & API

Next.js 16React 19Tailwind CSS 4Zod 4Vercel

Database & Security

PostgreSQLSupabase Auth & StorageRow Level SecurityVitest

Monetization

NOWPayments IPNCryptomus AdapterHMAC Verification

7. Verified Outcomes

•Security testing verified that anonymous access to private storage packages is completely blocked.
•Forged ownership and forged webhook attempts are deterministically rejected by RLS and HMAC layers.
•Desktop installers (NSIS/MSI) successfully packaged and tested on Windows 10/11.

← Back to Portfolio