Rob Rogers

Troubleshooter - Origin Latest

Proof of concept for LLM-driven NPC AI in video games.

Troubleshooter: Origin is an immersive, Deus Ex-style game set in a dystopian world. Currently prototyped in Garry's Mod using Lua, it completely replaces traditional, rigid multiple-choice dialogue trees with dynamic Large Language Model (LLM) interactions.

Key Features:

• Dynamic Gameplay Integration: The LLM updates game-state variables and triggers real-time character animations contextually tied to the conversation flow.
• Hybrid Model Support: Features native support for running Llama 3 locally, as well as fallback integrations with OpenAI's ChatGPT web API.
• Mitigated Hallucinations: Employs a highly specialized, priority-based prompt architecture that prevents game-breaking AI hallucinations and preserves narrative continuity.
• Adaptive Set Pieces: Integrated directly with the game's combat encounters. Instead of running purely rigid, pre-scripted events, a dynamic system analyzes how the player is faring to adjust difficulty on the fly—modifying enemy wave counts, damage scaling, and accuracy. It intelligently orchestrates set-piece blocks, dynamically choosing tactical enemy entry points (e.g., sending reinforcements down an elevator, emerging from a ventilation shaft, or breaching a door).

Demo Video below for the "Barbara the Serial Killer" sidequest.
This is an older video that does not represent the current state of events. It will be updated at a later date.

Pre-Generated Conversational Matrix with Caching (PCM) Latest

Provisional Patent 64/105,371 • Developed at mmaplabs.com

The Pre-Generated Conversational Matrix (PCM) is a breakthrough data architecture engineered for on-device local AI and network-isolated, sovereign offline assistants. While originally benchmarked and battle-tested within complex, real-time video game NPC dialogue systems (where full-scale dynamic LLM generation proved computationally intensive and memory-bandwidth bound), PCM solves traditional edge inference barriers by shifting the paradigm from live token generation to intelligent semantic selection and kernel-level memory paging.

By pairing an offline high-parameter "teacher model" (e.g., 70B parameter models) with an on-device lightweight 1B or 2B classifier, PCM enables privacy-focused, zero-token-cost, instant offline conversational experiences on consumer hardware—without thermal throttling, battery drain, or extreme CPU and RAM bandwidth requirements. For complex dynamic queries, PCM features an intelligent cloud fallback and multi-LLM routing gateway that dynamically directs requests to optimal cloud models while caching responses to eliminate redundant API calls. Learn more at mmaplabs.com.

Core Use Cases:

• On-Device Sovereign Offline Assistants: Powers completely network-isolated assistants on wearables, AR glasses, and mobile devices with absolute privacy and zero-latency response delivery.
• Cloud Fallback & Multi-LLM Routing Gateway: Acts as an intelligent gateway that routes complex or out-of-domain queries to larger cloud LLMs (OpenAI, Anthropic, open-weights cloud endpoints) with automated cloud response caching.
• Enterprise Upstream Caching Tier: Intercepts and resolves repetitive queries at the local server level before hitting expensive downstream GPU server banks, dramatically reducing cloud API bills and server loads.
• Interactive NPCs & Real-Time Simulations: Tested extensively with complex game NPCs, replacing heavy compute-on-demand loops with deterministic, zero-hallucination conversational sharding.

Provisional Patent Architecture & Innovations:

• Dual-Tier Runtime Inference: Executes sub-5ms zero-dependency term-frequency pre-filtering (TF-IDF) to isolate candidate intents, followed by a single forward pass through a 1B/2B non-generative semantic classifier gateway.
• Pre-Generated Binary Knowledge & Conversation Files: Knowledge indices, dialogue paths, and semantic embeddings are compiled into high-density binary files (e.g., pre-generated knowledge `.bin` files) mapped directly via POSIX `mmap` C functionality.
• Dual Short-Term & Long-Term Memory Architecture: Maintains active conversational variables through a dual-tiered memory system—tracking immediate interaction turns (Short-Term Memory) and persisting long-term contextual state variables (Long-Term Memory) alongside localized caching (`cache.bin`).
• Kernel Virtual Memory Pointer Paging (`mmap`): Translates classified intents directly to virtual memory offsets. The OS kernel fault-pages only targeted payload blocks into active RAM on-demand, establishing a constant runtime memory ceiling independent of knowledge base size.
• Ephemeral Context Vault: Eliminates context window bloat and memory drift through a deterministic state machine using token grammar constraints, atomic filesystem primitives, and rapid Jaccard similarity fuzzy-matching.
• Atomic Overlay Patching: Updates knowledge indices dynamically via lightweight binary delta patches mapped in virtual memory without rewriting base files or interrupting active readers.

Target Architecture & Engine Integration

Architected to support cross-platform native execution, embedded devices, Unreal Engine, and Source Engine environments through a clean, decoupled pipeline.

Wi-Fi Device Tracking – E-Tagged (2015)

This was a proof of concept unit made in a weekend over beers with my business partner out of a previous project. It was for tracking 802.11 devices associated (Connected to wifi networks) and unassociated (wifi enabled on but not connected to anything).

Initially built in a more limited prototype form in 2012 using off-the-shelf wireless gear, the project hit severe hardware constraints with insufficient RAM and flash memory to support heavy packet processing and local metric aggregation. Recognizing these physical limits, we transitioned the architecture to dedicated, custom embedded hardware designed specifically for high-throughput wireless monitoring.

Later versions had a complete web portal, proper database structure, google maps integration, promiscuous bluetooth and discoverable bluetooth, as well as tracking access-points after we started noticing more cars with in-car wifi built in. I also made a version in 2019 that could also track tire pressure monitoring sensors' unique 16-bit ID numbers, associating all metrics it discovered together. When paired with a camera you could build a pretty expensive inventory of metrics to track people or cars.

Fixed Wireless LTE Prototype

Fixed wireless LTE unit for long-range LTE connections in remote areas.

Field prototype engineered for clients with poor cellular connectivity, specifically designed for use in elevator machine rooms where it served as the sole reliable method to establish signal. Demonstrates signal distribution, RF link budgeting, and wireless broadband access node architecture for high-speed connectivity in rural and underserved areas.

Sentinel (2016–2020)

Deception Honeypot System • Lead Product Developer & Architect

Sentinel was a high-interaction deception and intrusion detection system ("honeypot in a box") designed to detect unauthorized network probing, track attacker dwell time, and alert enterprise administrators to threats in real time. Operating on behalf of Ontario High Speed Inc, I reported directly to John McAfee and worked closely under his leadership in Durham, North Carolina as Lead Product Developer and Principal Architect.

Together with John McAfee and security researcher Chris Roberts, I architected the complete platform, led a ground-up rewrite to meet strict enterprise auditing standards, built the hypervisor/WAF server infrastructure, authored the core Python/C++/C embedded codebase, and managed the software engineering team. See detailed technical experience breakdown below under Professional Experience.

Click images to view full size.

Elevator Monitoring System – Liftronics (2022)

Designed and deployed an end-to-end remote telemetry and diagnostic platform engineered for real-time elevator controller monitoring. Starting with the Otis elevator controller, we developed a modern drop-in replacement for the legacy Otis REM system (which historically relied on manual DTMF phone audio tones to report status).

This system features a cloud-based management portal that proactively identifies fault codes before service disruptions occur, enabling preventative maintenance and preventing passenger entrapments. In the event of a critical alert, technicians receive instant SMS and dashboard telemetry detailing exact fault codes, ensuring proper replacement components are brought directly to the site for rapid restoration.

Hardware & Architecture Highlights:

• Embedded Processing: Built on a Freescale i.MX6 ARM embedded system running custom Debian Linux, capable of simultaneously monitoring up to four separate elevator cabs/controllers.
• Hardware Protocol Translation: Custom-designed hardware adapter board converting RS232 serial interfaces to Otis's proprietary RS422 signaling protocol.
• Cloud Telemetry: Real-time event logging, metric visualization, and SMS alert dispatching.

Click images to view full size.

2018–Present — Legendary I.T. Solutions I.N.C.

President & Co-Founder | Office: 78 Centre St N, Floor 2, Unit D, Oshawa, ON | legendaryitsolutions.ca

• Deliver senior IT architecture, cybersecurity hardening, and hands-on engineering consulting for manufacturing, healthcare, SMB, and ISP clients. Discover our full capabilities at legendaryitsolutions.ca.
• CISA / DoD / NSA Infrastructure Hardening: Enforce defense-grade hardening standards across enterprise platforms, implementing Management Plane Protection (MPP), Control Plane Policing (CoPP), strict VTY ACLs, and disabling unauthenticated discovery protocols.
• Zero Trust Out-of-Band Management (OOBM): Enforce 3-plane separation (Management, Control, Data planes), rendering management portals and console servers 100% invisible on external interfaces with OpenVPN TLS-Crypt, IPsec IKEv2 EAP-TLS, and mandatory PKCS#11 hardware YubiKey 2FA.
• Next-Gen Firewalls & Perimeter Defense: Design and manage Palo Alto Networks (PA-Series, App-ID, WildFire), Cisco Firepower FTD/FMC, and High-Availability pfSense Enterprise carrier firewalls.
• Industrial Control (OT) & SCADA Web Telemetry Modernization: Retrofit unsecure, legacy Modbus-to-Ethernet serial gateways and factory PLCs into modern, air-gapped web telemetry pipelines. Implement NIST SP 800-82 Purdue Model DMZ segregation, AppArmor MAC process protection, and ModSecurity OWASP Core Rule Set (CRS) firewalls to stream real-time operational variables into secure web dashboards with instant SMS alerts.
• Linux & Windows Server Hardening: Deploy and maintain hardened Debian Linux and Windows Server Active Directory infrastructure, utilizing Syslog-ng custom log parsers and Graylog SIEM clusters for real-time threat intelligence aligned with CIS Controls v8 and ISO 27001 baselines.
• Cisco Enterprise Routing & Switching: Architect enterprise Cisco IOS/IOS-XE infrastructure across Catalyst switches, Nexus data center switches, and Cisco ASR/ISR routers—implementing BGP multi-homed edge routing, MPLS core networks, and Private VLANs (PVLANs) with 802.1X NAC.
• Team & Operational Management: Direct technical staff and project delivery alongside hands-on IT engineering operations.

2010–2017 — Ontario High Speed Inc

Vice President / Co-Founder (ISP Operations)

ISP Operations & Engineering (Vice President / Co-Founder)

Founded to deliver high-performance rural broadband, Ontario High Speed built out dedicated wireless distribution towers and a fiber-backed carrier network serving subscribers across the Durham region before successfully selling the customer base to Vianet.

• Built & Operated Rural ISP Infrastructure: Founded and operated a rural fixed wireless ISP serving ~1,200 active subscribers, achieving 99.999% core uptime over 5 years across all distribution towers.
• Tower Buildout & RF Path Planning: Constructed self-supporting communications towers and television towers, while securing mounting rights on grain elevators and agricultural silos across Durham Region. Maintained strict installation standards: perfect line of sight on 5 GHz, near-perfect on 2.4 GHz, and non-line of sight limited strictly to short 900 MHz links (<2 km). Limited PTMP subscriber distance to 15 km to guarantee signal levels between -47 dBm and -66 dBm (full Wi-Fi signal parity).
• Core L3 Routing & Switching Architecture: Designed and operated the core L3 routing infrastructure using a Cisco Catalyst 6500 with Supervisor 720 3B (serving as the central core Layer 3 router/switch supporting up to 40 Gigabit ports for expansion) alongside Cisco VXR 7206 NPE-G2 routers capable of terminating over 1.5 Gbps of Layer 2 PPPoE subscriber traffic per chassis.
• Broadband Access & Subscriber Isolation: Enforced strict subscriber isolation via 802.1Q VLANs and PPPoE. Implemented virtual Layer 2 tunnels from our core network to subscriber premises, allowing subscribers to retain static IPs seamlessly while directly routing /29 and /28 subnets to business clients.
• Carrier Fiber & Multi-Band Spectrum: Migrated to gigabit fiber optic backhauls via Bell Canada, managing peak capacity of 1,536 public IPv4 addresses. Operated across 900 MHz, 2.4 GHz, 3.65 GHz (licensed by Industry Canada), 5 GHz, 24 GHz, and 60 GHz bands using Ubiquiti AirMax, Metrolink 802.11AD 60GHz prototypes, Cambium equipment, AirFiber, and Cambium PTP650 microwave backhauls.
• Core Network Services & Hypervisor: Deployed virtualized network infrastructure on Debian Linux hypervisors running BGP (multi-homed edge routing), MPLS, static routes, OSPF, EIGRP, BIND9 DNS, RADIUS, syslog, and SNMP monitoring.
• Automated Intrusion Detection & Active Core Mitigation: Designed and automated a Snort-based IDS integrated directly with core Layer-3 switching. Implemented automated containment workflows including instant core null-routing of malicious IP addresses, dynamic access-list (ACL) enforcement, and forced subscriber isolation.
• Threat Intelligence & Malware Suppression: Detected infected customer endpoints through IP spoofing violations, ingress filtering blocks, and correlated IDS alerts, blocking malicious IP addresses and C2 (Command-and-Control) DNS domains associated with active malware and botnet activity.
• Management Plane Isolation & Zero-Trust Architecture: Enforced strict management-plane isolation separating management, control-plane (SNMP, RADIUS, TACACS+), and subscriber data planes per NSA and Cisco guidelines. Segmented management networks geographically and by functional role, enforcing mandatory VPN access for all device management—even for hardware co-located on site.
• Operations & Field Leadership: Automated monitoring, reporting, billing, and security alerting while building data center facilities and managing field installation teams.

Click images to view full size.

Enterprise IT Consulting (Durham Region)

• Regional Enterprise & Manufacturing IT Consulting: Provided senior IT architecture, infrastructure stabilization, and cybersecurity consulting for commercial businesses and manufacturing plants across Durham Region (as well as client companies utilizing our services), laying the groundwork for Legendary I.T. Solutions Inc.

MGT Capital Investments, Inc. / Sentinel Project Development (May 2016 – Nov 2017)

Lead Product Developer & Principal Architect — Reporting Directly to John McAfee (Durham, NC)

• Direct Executive Reporting to John McAfee: Reported directly to John McAfee and worked directly under his executive leadership in Durham, North Carolina for the majority of the project lifecycle. Translated executive directives into production hardware, software, and cloud architectures.
• Lead Developer on Sentinel Deception Platform: Served as Lead Product Developer for Sentinel—the world's first commercial "honeypot in a box" high-interaction deception and intrusion detection system. Originally brought on to commercialize E-Tagged (a mobile device tracking solution), but refocused on Sentinel while also contributing to an unreleased hardware unit tracking Wi-Fi and Bluetooth devices functioning as a Wireless Intrusion Detection System (WIDS).
• High-Interaction Honeypot Architecture & Telemetry: Architected deception hosts and simulated outdated, unpatched corporate systems to attract attackers and observe exploitation techniques, persistence mechanisms, and dwell time. Built automated alert pipelines where honeypot triggers sent immediate administrator notifications along with samples of injected/executed data, usernames, and passwords attempted. Generated forensic telemetry and attacker activity timelines for internal research and demonstrations.
• Custom Embedded Hardware (Freescale i.MX6 ARM): Customized Freescale i.MX6 ARM system boards using automotive-grade components to meet business constraints and excluded unnecessary hardware parts.
• Debian Kernel Bootstrap & Custom C Userspace Drivers: Deployed a custom Debian Linux distribution created using `debootstrap`. Wrote custom C userspace drivers from manufacturer documentation to reboot unsupported systems. Added Debian fork support across multiple hardware platforms (x86, Freescale i.MX6 ARM, and an unreleased cost-reduced Marvell platform).
• Linux Kernel, SysV Init & Storage Optimization: Maintained an internal SysV init fork of Debian 9 and all internal system scripts. Architected low-level storage routines to prevent flash wear and drastically reduce RAM and flash memory resource requirements.
• Sensor Hardening & Security Controls: Implemented `chroot` jails and AppArmor with custom profiles to restrict sensor nodes. Locked down office development PCs with AppArmor to enforce per-process isolation.
• Office IT & Enterprise Infrastructure: Setup and maintained enterprise lab equipment including Cisco Catalyst 3750X switches, pfSense firewalls, and Ubiquiti UniFi wireless access points. Built local hypervisors running Microsoft Hyper-V on HP ProLiant DL580 servers, managing file shares and local LXC container servers hosting internal testing and storage VMs. Configured real-time SNMP monitoring with LibreNMS and centralized syslog log aggregation with Graylog. Segmented office data, network, and access planes with out-of-band management (zero-trust architecture), denying cross-VLAN access.
• Data Center Infrastructure & Server Stack: Built and managed data center hypervisor infrastructure running Microsoft Hyper-V on Windows Server 2016 behind pfSense firewalls with strict data/network/access plane segmentation. Hosted segmented LXC container clusters for core Sentinel services—including main customer portals, support/provisioning portals, MySQL/MariaDB databases, PHP, and Apache web servers. Protected all services with custom AppArmor profiles and ModSecurity OWASP Core Rule Set (CRS) reverse-proxies to automatically drop web attacks and log alert telemetry.
• Software Development & Team Leadership: Developed the vast majority of platform code in Python, shell scripting, C++, and C (authoring the honeypot engine, config parser, web interface co-authorship, web post scripts, and internal utilities). Directed and mentored junior developers and engineers, managing a PHP web programmer and a systems technologist engineer.
• Operational & Manufacturing Automation: Designed end-to-end operational workflows for customer provisioning and support. Came up with manufacturing assembly line processes, authoring automated JTAG flashing and testing tools for production hardware assembly lines.

Click images to view full size.

2009–2010 — Silonet.ca (Orono, ON)

Network Engineer

• Network Infrastructure Stabilization: Hired full-time after initially consulting to audit, isolate, and eradicate malware-driven SMTP spam outbreaks across subscriber endpoints. Rebuilt and stabilized under-resourced ISP network infrastructure.
• ADSL Line Bonding via ML-PPP: Architected and deployed a custom OpenWRT kernel distribution supporting Multilink PPP (ML-PPP), bonding up to 16 physical ADSL lines into a single virtual Layer 3 PPPoE trunk delivering 96 Mbps downstream and 16 Mbps upstream capacity.
• Long-Range Wireless RF & Encryption: Migrated legacy MAC-filtered 802.11b/g links to secure WPA2 encryption using 10 MHz narrow channels. Engineered long-range 2.4 GHz Atheros 5K PTMP links (serving subscribers up to 20 km away) and 5 GHz backhauls between distribution towers.
• Carrier IP Addressing & Custom Access Points: Procured public IPv4 address blocks from upstream providers to eliminate carrier-grade double NAT for subscribers. Designed custom wireless access point nodes on Gateworks Avila embedded hardware platforms to solve vendor interoperability issues.

2006–2009 — BestByte Computers (Oshawa, ON)

Part-Time Service Manager (College Job)

• Managed weekend technical repair staff, store operations, customer escalations, and technical service delivery workflows while attending Durham College.
• Performed complex hardware diagnostic, motherboard repair, software troubleshooting, and virus/malware remediation across client systems.
• Oversaw inventory RMAs, service workbook chain-of-custody tracking, billing invoicing, and customer return authorizations.

2004–2006 — Canampak Computers

Computer Repair Technician & Sales (High School Part-Time Job)

• Executed hardware diagnostics, component upgrades, custom PC builds, and software troubleshooting for retail and commercial clients.
• Managed daily storefront operations, customer technical support inquiries, and inventory management.

2003–2004 — Global Electronics Systems (GES)

Computer Technician & Technical Sales (High School Part-Time Job)

• First industry technical role during high school: performed hardware repairs, system assembly, software installations, and customer technical assistance.
• Managed opening store procedures, inventory receiving, service ticketing, and retail sales support.

Education & Formal Training

Durham College Oshawa Campus — Computer Systems Technology (3-Year Advanced Degree) | Class of 2009

Comprehensive 3-year enterprise IT infrastructure, systems administration, and software engineering curriculum covering on-premises enterprise environments, network architecture, and security engineering:

• Cisco Networking & Internetworking: CCNA / CCNP / CCSP Track — TCP/IP architecture, VLSM subnetting, BGP, OSPF, EIGRP, Cisco router & switch configuration, VLANs, STP, 802.11 Wi-Fi, and WAN technologies.
• Enterprise Systems Administration: Windows Server (Active Directory DS, Group Policy Objects, DNS, DHCP, IIS, Exchange) and Enterprise Linux / Unix (Red Hat/Fedora, user management, Apache, Samba, NFS, cron automation).
• Software Development, Databases & Automation: C++ Systems Programming, Python, Relational Database Administration (MySQL / MS SQL Server, query design, ERD modeling), Bash shell scripting, VBScript, and Web Technologies (HTML/CSS).
• Network Security & Systems Hardening: Firewalls, NAT/PAT, Access Control Lists (ACLs), IPsec / PPTP VPNs, port scanning, vulnerability assessment tools, and host security hardening.
• Hardware Engineering & Enterprise Storage: Advanced PC architecture, RAID configurations (RAID 0, 1, 5, 10), Fibre Channel Storage Area Networks (SAN), Serial Attached SCSI (SAS) storage arrays, hardware diagnostic testing, and multi-site enterprise capstone build-out.

Certifications: CompTIA A+ (Certified 2009)

Send a direct message regarding projects, consulting, or inquiries.

Leave this field blank

Your Name *

Email Address *

Phone Number (Optional)

Message *

Send Message