Qinnovate

<div align="center">

![divider](https://raw.githubusercontent.com/qinnovates/qinnovate/main/docs/images/divider-qinnovate.svg)

</div>

# Qinnovate

Open security research for brain-computer interfaces. Vendor-agnostic. Apache 2.0.

> **By using this repository, you consent to the terms in [DISCLAIMER.md](DISCLAIMER.md).** This project is early-stage research in active development — not a validated standard, not a clinical tool, not production software. All security testing must be conducted in simulated or controlled laboratory environments. The human brain is not a test environment. See the full [Disclaimer, Terms of Use & Responsible Research Policy](DISCLAIMER.md), [Code of Conduct](governance/CODE_OF_CONDUCT.md), and [Security Policy](SECURITY.md) before contributing or applying any material from this project.

This project asks a question that existing frameworks have not yet systematically addressed: **what happens to a patient when their brain-computer interface is compromised?** Not the data. Not the device. The person.

---

### About This Work

The author is a security engineer with ~15 years of IT and security infrastructure experience, not a mathematician, physicist, or neuroscientist. AI tools (primarily Claude, with Gemini and ChatGPT for cross-validation) were used extensively — for literature synthesis, code generation, threat modeling, and writing. All AI-derived claims should be treated as **proposed and unvalidated** until independently verified by domain experts.

The framework, threat taxonomy, and governance structure are the author's contributions. Mathematical formalizations (signal integrity scoring, physics-derived equations) are future work pending collaboration with physicists and neuroscientists.

**Full transparency:** [Transparency Statement](governance/TRANSPARENCY.md) | [Derivation Log](qif-framework/QIF-DERIVATION-LOG.md) (99+ entries) | [Ship Log](governance/SHIP-LOG.md) | [Validation Status](VALIDATION.md)

---

## Table of Contents

- [Validation Summary](#validation-summary)
- [What This Project Contains](#what-this-project-contains)
- [The TARA Insight](#the-tara-insight)
- [Why Neurosecurity](#why-neurosecurity)
- [Architecture](#architecture)
- [Terminology](#terminology)
- [Repository Structure](#repository-structure)
- [Site Revision History](#site-revision-history)
- [Collaboration](#collaboration)
- [Tools](#tools)

---

### Tools

| Tool | What It Does | Install |
|------|-------------|---------|
| **[Quorum](https://github.com/qinnovates/quorum)** | Orchestrate a swarm of AI experts on any question. Multiple specialists debate, research, validate — then a supervisor delivers the verdict. | `claude install qinnovates/quorum` |
| **[NeuroSIM](https://github.com/qinnovates/neurosim)** | Neural Security Operations Simulator. BCI signal processing meets security operations. | See repo |
| **[macshield](https://github.com/qinnovates/macshield)** | Network-aware macOS security hardening. | `brew install qinnovates/tools/macshield` |

---

### Validation Summary

Solo research, tested honestly. Full methodology and limitations at **[VALIDATION.md](VALIDATION.md)** | **[Live dashboard](https://qinnovate.com/research/validation/)**

| What | Result | Tier |
|------|--------|------|
| [Neurowall coherence monitor](VALIDATION.md#val-001) | 11/14 at 15s, 9/9 at 20s, 50-run stats, 0% FPR | Simulation + Independent |
| [BrainFlow validation](VALIDATION.md#val-002) | 16-channel, 100% detection, 0% FPR | Independent |
| [Physics security guardrails](VALIDATION.md#val-007) | 12/13 constraints verified, 4-layer architecture | Analytical + Cross-AI |
| [Protocol vulnerability](VALIDATION.md#val-006) | Real vulnerability in BCI streaming protocol, responsibly disclosed | Disclosed |
| [NSP transport](VALIDATION.md#val-003) | Round-trip simulation PASS, 65-90% compression | Simulation |
| [NISS scoring engine](VALIDATION.md#val-004) | 109/109 techniques scored, PINS flags correct | Simulation |
| [Citation verification](VALIDATION.md#val-009) | 3 fabricated citations caught and removed from preprint v1.0 | Audit |
| **Not yet tested** | NISS clinical validation, DSM-5-TR mappings, BCI Limits Eq, real EEG, real hardware, real attacks | |

This is early-stage research by a solo researcher. Empirical validation requires BCI hardware, IRB approval, and clinical expertise. Everything is published openly so research groups with those resources can test, validate, refute, or extend it.

---

## What This Project Contains

### Frameworks & Specifications

| Component | Description | Status |
|-----------|-------------|--------|
| **[QIF](https://qinnovate.com/framework/)** | 11-band hourglass security architecture for BCIs | Proposed, v7.0 |
| **[Working Paper](https://doi.org/10.5281/zenodo.18640105)** | Peer-citable academic paper (CC-BY 4.0) | Published |
| **[TARA](https://qinnovate.com/atlas/tara/)** | 135 BCI technique pairs, STIX 2.1 registry | v1.7 |
| **[qtara](https://pypi.org/p

... (truncated)