lucaprata.com
1—6 pages · ⌘K search · T theme
lucapratacom
— ⌘K
01index 02pill 03work 04writing 05about 06book
github.com/LucaPRATA · github.com/langacorp · ORCID 0009-0000-6988-9790
LANGA Corporation S.r.l. — Milan, Alba, Brescia, Cuneo
Web 2 · 2009—2018Earth

Solid ground.

0/19
things this estate runs on 0:00
0in use 0deprecated 0disallowed
elements 0/4 earthmagnet waterfloat firedash airdouble jump
Milan · since 2009 · infrastructure & verification

Building the backbone
of modern tech.

›
Eleven things I built. Eight algorithms holding them up. Seven of those expire.
▲
—
▲
0chain
0years on the web
0sites in production
0public repositories
0citable DOIs
0algorithms tracked
0declared gaps
Luca Prata, Milan
Milan · 2026
Luca PRATA
Founder, CEO and builder — LANGA Corporation S.r.l. · Milan, Italy
01 — state

What I’m keeping
up right now

measured —
server · GitHub · Zenodo

Not a shelf of skills. The numbers of an infrastructure that runs, each with the date I measured it. A number without a date ages while you read it.

WordPress in production
45

One server, ten PHP versions running side by side, from 7.1 to 8.5.

Live storefronts
9

WooCommerce with real payments and real orders.

Public repositories
23

Four on my account, nineteen on the LANGA organisation. Eight carry a DOI.

Defects found and published
4

A soft 404, five years of readable secrets, a hand-typed number, a wrong promise.

02 — the migration clock

How long does it take
to replace the world’s
cryptography?

NIST IR 8547 · FIPS 203/204/205
SP 800-131A · sources below

This is the chart I actually care about. Not price, not narrative — the clock every system on the internet is now running against. NIST deprecates RSA, ECDSA, ECDH and finite-field Diffie-Hellman after 2030 and disallows them after 2035. That is not a distant problem: it is a migration, and migrations take longer than anyone budgets. Click a row for the detail.

in use deprecated disallowed approved expected —
—
—
Where I sitkemproof attests an ML-KEM-768 exchange — and says only what that proves. It exists because our own pages promised encryption while the code performed a key exchange.
SourcesNIST IR 8547 ipd · FIPS 203, 204, 205 finalised 13/08/2024 · HQC selected 11/03/2025 · SP 800-131A Rev. 3
03 — surfaces

Digital,
on every face

the real skill is one:
learning fast

I’m not a vertical. Photography, design, web2, web3, 3D, marketing, infrastructure — and the thing I actually do best is none of those. It’s reading where a market is going before it gets there, and learning the technology it will need before it needs it.

04 — the four elements

Four chapters.
You have to go
and get them.

earth · water · fire · air
each core sits off the path

Four cores float beside the track in the hero, one per era. Each one changes how the pill drives — grip, glide, a dash, a second jump — and each one opens the chapter below it. This is the only part of the site you cannot simply scroll to. It is a small joke with a serious point: an inventory nobody walks is not an inventory.

Web 2 · 2009—2018

The page

Earth

I started with a text editor and a server I could reach by FTP. HTML, CSS, a database, PHP. No framework decided anything for me, and when a page was slow there was exactly one place to look. That is not nostalgia — it is the last time the whole system fitted in one head, and it is the reason I still read a stack top to bottom before I touch it.

By 2013 I was running the tarpaulin department around an industrial plotter, and the web was the side that paid worse and taught more. In 2015 the company started in an attic: no office, no funding, no round. In 2018 eFruit put a real shop online, producer to consumer, with real orders and real refunds — which is where you learn that software is judged on the day it is wrong.

45 WordPress installs in production today, on one server, across ten PHP versions from 7.1 to 8.5.

Locked — the earth core

One person could hold the whole stack in their head

Taking it also gives you GRIP in the hero.
Web 3 · 2015—2024

The chain

Water

Ethereum was the first thing that made me rewrite what I thought software was: code a network executes and verifies, where the expensive part is not running it but agreeing that it ran. I did not arrive for the price. I arrived because it was the first execution model in twenty years that changed who has to be trusted.

Then React Three Fiber turned the browser into a 3D runtime — the hero you just drove is that, and it runs on the same machine that serves the page. And zero-knowledge turned a chain into something better than a ledger: a machine that verifies computation without seeing it. That idea is the direct ancestor of everything I now build around proof.

Liquidity teaches one hard lesson: state you do not control moves while you are not looking.

Locked — the water core

Shared state, and nothing stops where you left it

Taking it also gives you GLIDE in the hero.
AI · 2022—2026

The agent

Fire

An agent does not ask twice. It reads, decides and acts, and the interesting question stopped being how clever it is — it is what it is allowed to touch. Most of the failures I have cleaned up were not wrong answers. They were correct answers executed against production because nobody had written down the boundary.

The best thing an agent of ours ever did was refuse. It had an order, the order crossed a rule, and it stopped and said so. That is the behaviour worth engineering: not obedience, not brilliance, but a system that knows the edge of its own permission and reports when it reaches it. Everything else is speed, and speed you can buy.

Fast, volatile, and it needs permissions more than it needs intelligence.

Locked — the fire core

Software stopped waiting to be told

Taking it also gives you DASH in the hero.
Post-quantum · 2024—2035

The proof

Air

NIST finalised FIPS 203, 204 and 205 on 13 August 2024 and selected HQC on 11 March 2025. IR 8547 deprecates RSA, ECDSA, ECDH and finite-field Diffie-Hellman after 2030 and disallows them after 2035. Nothing breaks on those dates. What happens is that the certificates, signatures and key exchanges holding your business together quietly stop being defensible, and a signature made today still has to verify in 2036.

kemproof exists because of a smaller and more embarrassing fact: our own pages promised encryption while the code performed a key exchange. So it attests an ML-KEM-768 exchange and says only what that proves — not more. That restraint is the whole product. A migration is not a patch, and you get one more chance in mid-air, which is more than your keys will get.

19 algorithms tracked, 4 deprecated after 2030, 3 already disallowed. Counted, with dates.

Locked — the air core

The deadline you cannot see, coming for every key you own

Taking it also gives you SECOND WIND in the hero.
DYOR

I write about technology and infrastructure. Nothing here is financial advice, an investment recommendation, or an invitation to buy, sell or hold anything. I hold no advisory licence and I am not offering one.

Dates, standards and figures carry a source. Anything marked as a recollection is exactly that. Do your own research — I’m a technician, not your analyst.

page 02 — the pill

From the shop floor
to the stack

2006 → 2026
twenty years, one record

I started on an industrial plotter in a tarpaulin department, and I still think that was useful. A production line teaches the same lesson as an infrastructure: the part nobody looks at is the part that fails. This page is the whole record — projects, donations, awards, the company, and the years I never wrote a line.

2006 — 2012
Drawing
and building

Surveying school, CAD work, architecture at Politecnico. A project presented to Renzo Piano, a competition for Fassa Bortolo.

2013 — 2015
Shop floor,
then the office

Plotter operator in a logistics company, department lead after two months. Then marketing, then part of HR. Degree at 107/110. First company, 2015.

2016 — 2019
Founder,
then Milan

LANGA starts in an attic. Digital store in Alba, headquarters to Milan, LANGA Corporation S.r.l. incorporated 2019.

2020 — 2026
CEO,
and back to code

Offices in Milan, Alba, Brescia and Cuneo. 45 sites, ten tools with DOIs, and a fleet of agents with a written register.

generations

Six stacks,
one line

I did not build Ethereum
and I don’t say I did

What I can say is more interesting: I went from building web pages to trying to understand how the next model of the web gets built.

the record

Every year,
including the empty ones

click any row to open it ·
— photographs inside, from my own archive

Donations, awards and company records used to sit scattered across the site. They are in one line now. Rows with a red bar are antenna moments. Solid red rows are things I did and never wrote about — I leave them visible, because an archive that hides what is missing is a shop window, not an archive.

A CV is a claim; a photograph taken on the day is not. The industrial plotter, the attic the company started in, the mayor of Alba taking delivery of a defibrillator, the paediatric ward, the award with a page on the awarding body’s own site. Not one frame is stock — open the row it belongs to and it is there.

page 03 — work

Ten tools,
eight citable

github.com/langacorp
click a row for detail

None of these started as a portfolio exercise. Each came from a defect found on our own infrastructure — a check that was green and had looked at nothing, a number that had drifted, a promise the code did not keep. Eight carry a DOI, so they can be cited in a paper. We open how we work, never what we sell.

ToolWhat it doesStackThe defect behind itDOI
running

AEGIS —
the shield they wield

designed and built by me
aegis.langa.tv

Anyone can call a model. What is hard is running a hundred agents against a real estate of services and still knowing, a month later, who decided what, on what evidence, and what it cost. I designed AEGIS and I build it. It is the layer that makes that possible: shared memory, explicit permissions per role, every decision and every doubt written down at the moment it happens. Whoever produces does not verify. On 04/09 an agent refused an order of mine because it crossed a rule it had been given — that refusal is the feature.

aegis · governance.langa.tv—
0registered agents
0buckets
0refusals logged
HMACsigned writes

Sample view. Point it at a read-only AEGIS route to make it live — no secret leaves the server.

Not a lab toy. It runs a group.

AEGIS is the technology layer of LANGA Corporation — the company I founded in 2019 and still build in, as founder and as the person who writes the layer. It is reached over an HMAC-signed API: every write is signed, timestamped and replay-protected, and the same interface is what LANGA opens to its own services and licenses outside the group. That is the point of building it here rather than buying it: one core, five networks, sixteen services run on it every day, which is the only test bench I trust.

channels

Where to
check me

everything here
is verifiable from outside
clients & ventures

Built for
somebody else

selection
full record on /path
page 04 — writing

Infrastructure
before the narrative

one long piece a month
three signed a year

I don’t write about technology because it’s trending. I write about what breaks underneath, and every piece carries a proof from my own infrastructure. If a piece contains nothing I built, measured or broke, it isn’t mine — it’s a good article anyone could write.

Thread 1 · the front door

Infrastructure

Where does complexity move every time a technology gets easier?

  • From PHP to agents: 17 years of hiding complexity
  • WordPress is not old, it is infrastructure
  • React moved the problem, it did not solve it
  • Watch the boring layer
  • Why the URL refused to die
Thread 2 · the spine

Verification

Can I convince you something is true without asking you to trust me?

  • A 200 is not proof the page exists
  • Zero-knowledge proofs were never about crypto
  • The quantum problem is the migration
  • Agility beats strength in cryptography
  • Ethereum as a verification machine
Thread 3 · the frontier

Agents

What does software need in order to act alone without anyone trusting it?

  • An agent refused my order, and it was right
  • Permissions, not just intelligence
  • Context costs more than the answer
  • What happens when software can spend
  • How do you verify a machine?
the frame

Three lives,
every time

the editorial rule
behind all three threads

Every technology runs the same course, and knowing which phase it is in matters more than having an opinion about it. The third phase is the one that counts: when a technology drops out of the conversation, it usually won.

Phase one

Nobody looks

Research, prototypes, a handful of odd developers. The papers exist and nobody reads them. This is where the primitive is actually decided.

Phase two

Everybody looks

Narrative, money, media, opinion. The loud phase, and the least informative one. A narrative is the shadow of an infrastructure that already exists.

Phase three

Nobody names it

It became infrastructure. HTTP, DNS, TLS, compilers, databases. Nobody sees them, everybody uses them. That is what winning looks like.

calendar

Twelve months,
twelve pieces

signed LucaPRATA on three
the rest LANGA Technician
MonthPieceThreadProof it carriesByline
the rule

Where I
got it wrong

mandatory field
on every retrospective
page 05 — about

Building the backbone of modern tech.

Luca Prata, Milan
Milan · 2026
Luca PRATA
Founder, CEO and builder — LANGA Corporation S.r.l. · Milan · he/him
Firma autografa di Luca Prata
what I run today

Right now that
company is LANGA

origins 2009 · first company 2015
LANGA Corporation S.r.l. since 2019
about.langa.tv

I found it worth saying plainly: this is my site, not the company’s. Today I am CEO of LANGA Corporation — tomorrow it could be something else, and the record on this site would not change. What travels with me is the practice: the tools, the measurements, the rule about who verifies what. The company is where I apply it, and it is people — a team and developers who have built with us for years, several credited by name in the repositories.

What LANGA is, concretely: one core, five networks and sixteen services — marketplaces, tools, an award, an agency running since 2009 — all sitting on the technology layer I build, AEGIS, and all reachable over the same signed API. I am not a shareholder who watches: I founded it and I write the layer it runs on. The whole map is at about.langa.tv.

Verifiable identity
ORCID
0009-0000-6988-9790

Linked to GitHub, X and LinkedIn inside this site’s structured-data graph.

Company
LANGA Corp. S.r.l.
incorporated 2019

Piazza IV Novembre 4, Milan. Court of Milan. VAT IT10637600965.

Trade
Infrastructure
and verification

PHP, WordPress, React, Flutter, Python, Dart, post-quantum cryptography.

Standing rule
Whoever produces
does not verify

It holds for people and it holds for the agents I put to work.

channels

Where to
check me

no claim here
needs my word for it
giving

What went out,
not what came in

three donations
on the public record

These sat scattered across old posts. They belong in one place, dated, with no story attached.

DYOR

Nothing on this site is financial advice. Not a recommendation, not a solicitation, not an invitation to buy, sell or hold any asset, token or security. I hold no advisory licence and I am not acting as anyone’s adviser.

I write about technology and infrastructure. Where I discuss a protocol, a standard or a market cycle, I am describing how the technology works and where it sits in its life — not what it is worth.

Facts carry a date and a source. Anything marked as a recollection is a recollection, not a record. Figures measured on my own infrastructure carry the date they were measured. Do your own research.

page 06 — book

Pick a slot.
Bring a problem.

45 minutes · CET
no sales call

Not a sales call. Bring something concrete — something that keeps breaking, a number you no longer trust, a plan nobody has checked. I work across the whole digital side: the business, the marketing, the build, the chain and the lock. If I cannot help, I will say so in the first ten minutes.

this week — what I’m on open limited full —
—
wide open one slot left full Three pips, three slots. The next ten days are usually gone — book two or three weeks out if the date matters.
1 — choose a day
Free45 minutes
The slot travels with the order and is confirmed as soon as the payment clears. Card, PayPal, bank transfer, Satispay and Leghe. Prices are net: VAT is added on the payment page. Invoice issued by LANGA Corporation S.r.l. · VAT IT10637600965 · Milan. Reverse charge applies with a valid EU VAT number.
first — what do you want looked at? Pick an area. Everything below changes with it.
drag it, or use the arrows
Prices

Prices exclude VAT and are invoiced by LANGA Corporation S.r.l. The ranges move with the size of what is being looked at — three properties is not thirty. I do not sell hours: a benchmark costs what a benchmark costs. Anything you pay before Ongoing comes off the first month if you go on.

Language

Reports, code and writing come in English by default, because that is the language the work gets read in. Italian on request, same price — it is my first language, I am based in Milan and the invoice comes from an Italian company. Say which one you want in the note and that is the one you get; the code and the commit messages stay in English either way.

✕

how to play

Take nineteen.
Outrun the red.

←→AD steer
↑W go
space jump — hold it for a higher one
shift dash — once you have the fire core
phone pad on the left, JUMP on the right
Grey diamond, lowDrive over it.
Yellow cube, higherJump for it.
Red spike, highestJump for it.
The red cageThe only thing that breaks you. Two seconds, and you keep everything you took.
earth coreMAGNETAutomatic.
water coreFLOATHold JUMP in the air.
fire coreDASHSHIFT, or the DASH button.
air coreDOUBLE JUMPJUMP twice.

Arrows on the ground push you. Take one thing after another without stopping and the chain multiplies your speed.

Why nineteen, and why they have a date →