Hi, I'm N0zoM1z0 👋

Senior Incident Resolver @ TouHou University

Reverse engineering · game systems · music tooling · formal methods · zero-knowledge systems

My GitHub is what happens when a Touhou fan treats curiosity as an incident-response process. This has caused several incidents.

The name N0zoM1z0 is Nozomi + Mizore, from Liz and the Blue Bird—my favorite film from the Sound! Euphonium series—with just enough leetspeak to become an internet handle. That probably explains why music keeps sneaking into my engineering projects.

I reconstruct old games from binaries, build agents that dodge danmaku through the games' real input paths, turn private replays into zkVM witnesses, and occasionally ask coding agents to make IA sing. Formal methods stop the fun from quietly turning into a false claim.

The code lives here. On my personal site, I write about how I got there: which assumptions failed, which experiments went nowhere, what finally worked, and what I still can't prove.

The front door has a small spin-to-reveal ritual—because even the blog has a spell-card gate.

Cross the Barrier → read the field notes

Most of my office hours are spent investigating incidents in Gensokyo.

• Source reconstruction — rebuilding TH07, TH08, and TH10.5 against their original Japanese executables. “Looks equivalent” does not count. The bytes have veto power.
• Reverse engineering with receipts — build-specific address maps, runtime experiments, and byte-checked patches for Imperishable Night and Scarlet Weather Rhapsody.
• The game is the oracle — the TH06, TH08, and TH10.5 agents read native state and send controlled input back to pinned retail builds. Each game gets a different mix of route planning, differential experiments, and bounded learning; the retail game gets the final say.
• Faster and stranger Gensokyo — a deterministic, accelerated Linux TH06 runtime for solver/RL research, plus zkTH06: replay-verified Touhou semantics, gradually smuggled into OpenVM. Apparently Gensokyo has a proving system now.
• The actual university — the joke got out of hand, so 幻想鄉立東方大學 now has a trilingual campus, research ethics, incident dossiers, and a suspicious amount of lunar paperwork.

• VOCALOID MCP — an MCP server that lets coding agents compose, tune, render, mix, and audit native VOCALOID3/4 projects. It can validate the project and its native rendering path. It cannot prove that the song is good; human listening retains jurisdiction.
• osu! Reverse Engineering — native parsers, planners, and in-process timing experiments for mania, taiko, and catch, plus a static analysis of the client's integrity mechanisms.

Catch autoplay field report: 99.93%, 2,806pp on Flowering Night Fever. osu! later banned the account—fair enough, honestly XD. The experiment is over; the screenshot survives.

• oszillator — drop an .osz into the browser and play. Web Audio owns the clock; Pixi owns the playfield; your beatmap never leaves your machine. Try the live demo →

My professional focus is formal methods and zero-knowledge systems. I care about program semantics, translation validation, SMT/CEGIS, and verifiable execution—especially the gap between “the proof checked” and “we proved the right thing.”

• VeriMorph tests low-level transformations against explicit semantics and side conditions, with a fully specified small VM and a deliberately narrow x86-64 ELF target.
• Sphinx Interrogator uses relational observations, automata learning, and SMT/CEGIS to recover hidden state from a deliberately leaky microcoded VM.
• zkTH06 is the crossover episode: recover retail Touhou gameplay semantics frame by frame, then make a private replay the witness to an OpenVM proof.
• ProofMark combines anonymous eligibility, blind marking, tamper-evident logs, and Noir proofs in a privacy-preserving assessment workflow.

TouHou University approved my outside-world paperwork. Somehow. Beyond the Barrier, I work with:

• Preference Labs — with morluto, I work on Jacobian for exact mathematics and independent checking, LeanToken for finding the code that matters, and Preference for reasoning over prediction markets and world signals. Three ways of asking an agent to please look at the evidence before sounding confident.
• Bera Buddies — I'm a research intern working on zero knowledge, formal methods, and agent security. Most of it is still private; the Barrier is doing its job :3

On matters no proof system can settle, I maintain aggressively non-neutral priors:

• 🌿 Visual novel: Key's Rewrite. No counterexample accepted.
• 🕊️ Liz: the complete 47-track Liz and the Blue Bird soundtrack, kept in DSF. Some feelings require DSD.
• 🌕 Lunar allegiance: TH08 → Eientei → Kaguya → “竹取飛翔 ～ Lunatic Princess.” Absolute single-target routing; Eirin handles incident response: (ﾟ∀ﾟ)o彡゜えーりん！えーりん！ My music folder turns up roughly thirty related files. This is no longer a preference; it is a replication study. The one I keep returning to is nmk's “sola” from 千紫万紅 (MMO-12, Reitaisai 9, 2012-05-27).
• 🎤 VOCALOID: IA is my favorite voicebank; Natsume Chiaki's Miku track “花色日和” from 天響ノ和樂2 is my favorite song. Favorite voice and favorite song are separate variables. Q.E.D. ...probably.