Watch it work.

~2.5 million sealed capsules generated inside the vault in 30 minutes — one for each authorised device

A published, hourly proof that the custody chain is unbroken and unaltered up to secure delivery — checkable by anyone, covering every step up to secure delivery at the centres

This is the whole claim in one picture: CORTEX is designed to keep the question paper encrypted through custody and transfer, releasing readable content only inside an authorised candidate terminal after the prescribed checks pass. What moves between the Board’s vault and the candidate’s desk is encrypted capsules, and the set narrows at every hand-over — the centre’s, then the hall’s, then the single capsule for one candidate. Every device in between can store, route and count. None of them can open it. Two more things happen that a leaker cannot see. Inside the vault the “QP” (“Question paper”) itself is transformed — question order, option order and labels are varied per device after the paper setters lose control — so a stolen “Question 73 is B” note is worthless. And time cannot be added quietly: the opening hour is anchored to a signed certificate, with the paper watermarked, visibly and invisibly, the moment it appears.

Three signed receipts, one journey — collection, transfer, upload — so a packet cannot be lost, swapped or delayed unnoticed

The mirror of the paper’s journey: CORTEX is designed to keep each submitted response encrypted through collection, transfer and upload. It is sealed on the candidate’s own device at submit, and the invigilator, the centre and its systems all carry it without being able to read or alter a single answer. Hidden tampering becomes detectable rather than deniable.

Silence is an alarm — if an hourly publication is missed or late, that alone raises a breach alert

Publication is what turns a claim into something you can test. Anyone — a parent, an educator/coach, a journalist — can fetch the published fingerprints and confirm that no capsule leaked up to the moment of secure delivery at the centres. Nobody has to be believed, and nobody has to wait for the result to find out.

Nothing is silently overwritten — change an answer and a new signed event joins the chain. The earlier one is not deleted, it is superseded, and both remain in the record.

This is what makes the rest of it enforceable. Because the answer was signed on the device at the instant it was given, and each event is chained to the last, there is no later moment at which a response can be quietly edited, dropped, re-ordered or swapped — not in the hall, not at the centre, not in transit, not at the Board. Any such attempt breaks the chain, and a broken chain is visible to the candidate.

One receipt, and not one answer disclosed — it binds the paper-opening certificate, the response journal root and the scoring linkage proof, while revealing nothing a candidate wrote

And when something genuinely does go wrong, it is contained instead of catastrophic. A leaked photograph or one cheating candidate no longer forces a blanket re-examination: clean chains stand on their own evidence, and only the affected candidates, centres, shifts or terminals are quarantined. Crores of candidates sit high-stakes exams in India every year. Not one of them should have to sit again because of somebody else’s compromised hall.