Public install

Clone it. Verify it. Do not paste secrets.

QorTroller is a public research and protocol repo. Anyone can use the read/verify path. Live capture, chain writes, and Buzz posting stay opt-in and env-only.

1. Requirements

Python 3.10+ (3.11 or 3.12 preferred)
Git
Optional later: Node 18+ for Hardhat, Rust for the Wasm applet, a DualShock Edge for hardware tests

2. Clone

git clone https://github.com/ConWan30/QorTroller.git
cd QorTroller
pip install -r requirements.txt

Use HTTPS. You do not need a GitHub PAT to clone or open a pull request from a fork.

3. Verify without hardware or keys

python scripts/vapi_invariant_gate.py
python scripts/verify_wmp_ladder.py

The invariant gate is the fail-closed protocol check. The WMP ladder re-checks the published certified-human bundle using the standard library only. Neither command needs bridge/.env.

4. Optional operator path

Only if you are running a live rig or the Buzz bot:

Copy scripts/qortroller_buzz_bot.env.example — never commit the filled file.
Keep wallet keys, PATs, and nsec values in local env files that .gitignore already blocks.
Do not enable L6_CHALLENGES, GSR, or chain submission unless you have read the hard rules in the README.

5. Community

Discussions for questions and ideas
Issues for bugs (no secrets in screenshots)
SECURITY.md for private vulnerability reports
Qoresence if you want the observation-plane product