Parent project · V.A.P.I. reference implementation

Core Controllers
of their gaming data.

QorTroller is the truth plane: a cryptographic anti-cheat and gamer-sovereignty protocol on IoTeX. A real human on a real attested controller produces a receipt anyone can re-check. No token, no wallet, and no GitHub PAT is required to clone, read, or verify the public surface.

Public repo · Apache-2.0 · IoTeX testnet · secrets stay in local .env files

What a stranger can do today

Clone the repo, run the invariant gate, and re-check the published data-economy ladder. Those paths are designed to work without operator keys or live hardware.

What never ships in git

GitHub PATs, wallet private keys, Buzz nsec values, bridge/.env, biometric dumps, and live session captures. Templates exist. Live secrets do not.

Compose, do not conflate

Parent truth plane.
Sibling observation plane.

This repo

QorTroller

Cryptographic presence, PoAC receipts, on-chain consent, tournament gates, and gamer sovereignty. Claims are measured and fail-closed. This is the parent protocol.

Sibling project

Qoresence

Local HDMI + DualSense observation engine. One capture card, one clock, many glasses. It does not claim humanity or write chain by default. conwan30.github.io/Qoresence

No secrets required

Start on a clean machine.

git clone https://github.com/ConWan30/QorTroller.git
cd QorTroller
python scripts/vapi_invariant_gate.py
python scripts/verify_wmp_ladder.py
01

Read

README, SECURITY, PRIVACY, and the whitepaper. The public claim surface is documented, including known limits.

02

Verify

Invariant gate + stranger ladder. Exit 0 means the published evidence still checks. Nothing is faked as a pass.

03

Discuss

Use Discussions for questions and ideas. Use private advisories for security. Never paste keys into issues.

Honest ceilings

What this is, and is not.

Is

A proof layer

It binds controller physics and match evidence into a receipt. Organizers and strangers can re-check published artifacts.

Is not

A kernel anti-cheat

It does not ban players, identify which human is playing, or catch a real person using an aimbot. Advisory until an organizer adopts it.