The man who says he started it
In one lineThe strongest rival origin story is stated in full, and filed at the tier it earns.
Manuel Chavez III (Defango) gives a detailed account of originating Q as a counter-operation at a DEF CON 25 talk in July 2017. It is filed here in full, at the tier it earns, because a serious dossier has to state the competing account rather than route around it.
DEF CON 25 · Las Vegas · July 2017. Defango on the conference floor, in conversation. Asked whether there is a bounty for faking a 3301 signature, he says "Z … didn't fake the 3301 signature, but he faked the Tangri 137 signature" (0:41), that "Z's not one person … he's actually multiple people" (0:58), and that the PGP key in that year's Cicada message "was actually embedded" (2:02). All of it is his claim; he offers no proof. 2 min 19 s, as I posted it on X (@cheshire3301).
Same conference, his "ambush." Streaming by the fountain, Defango tells viewers "there was an ambush … I'm under satanic attack. I'm just kidding," then says he was "surrounded by five individuals" from "the fake Cicada 3301 crew … the elitist ones" in the vendor area. By his own telling, what happened was talk: he got "bullshit about PGP" and was asked why he was "repping a fake puzzle." I call the ambush story a lie, and his own description is an argument, not an attack. The solver he names is left out here.
What he says happened
At DEF CON 25 he handed out QR codes and steered people toward a 303 Skytalk billed as a whistleblower session, filling a room of roughly sixty people. There, he says, he laid out a plan: parody the Q of Luther Blissett's novel into something "more Catholic, more western," name Hillary Clinton as villain and select Michael Flynn as the anti-hero, teach the audience about Operation Mockingbird while psy-opping them, deliberately amplify Pizzagate, and use "do your own research" as a maze. The stated objective was to draw enough criminal behavior onto 4chan and 8chan to get both shut down.
He then says he was routed to Microchip via Justin McConney, built a Discord with four other people — Droog, Microchip, himself as Turbo, and Dreamcatcher — handed over the account, and walked away. He places the release of the "Matlock" tripcode, which made anyone able to post as Q, with Microchip.
Why it cannot be checked — and who designed it that way
A 303 Skytalk bars press, cameras and recording devices. He states he deliberately took no names and asked attendees not to look at him. So the account is unfalsifiable by construction: no recording, no roster, and two named attendees who will never confirm it.
Unverified is not false, and this file does not treat it as false. But an origin story whose only possible corroboration was designed out of existence in advance carries the burden, not the reader.
The dates that sit around it
2016-09/10 u/Drpbox amplifies FBIAnon, reframes Cicada as an insider leak channel
2017-04-19 quatrain given to Miller to encrypt for Sevens.Exposed
2017-04-26 a Q.mp3 is uploaded to the Sevens.Exposed site
2017-06-30 the Cornwell Biss "HAZMAT" email
2017-07-27 DEF CON 25 — the claimed Skytalk
2017-10-28 first Q post
2017-12-06 Schoenberger sends Victurus Libertas an authored QAnon script
2018-05-19 "We had planned to intro Q Sept 26th"
Chavez's own account is that he told Schoenberger about Q in September 2017. Schoenberger's own September 26 planning line, the April Q.mp3, and the 2015 sworn 4chan admission all sit before that conversation. Whatever happened in that room, it was not the beginning of the material.
He also concedes the decisive point directly when pressed: that Schoenberger could have been talking to Microchip before November without him knowing. That concession is worth more than the whole DEF CON narrative, because it is the one part of his account that costs him something.
"Brand defense strategist for Cicada 3301" — in his own words
The operator this chapter describes has also described himself. In replies on YouTube (including under Schoenberger's Sophia Musik channel) and Reddit, the nrauhauser account writes:
being a fact OR expert witness as needed, for both Thomas and the collective.
And it was needed."
"I'm currently brand defense strategist for Cicada 3301, which got dragged into
the Qanon stuff by the biggest collection of scumbags I've ever seen."
// to @MarciaStockton
"I'm glad Thomas and Cicada 3301 are getting clear of the Qanon smear. And I owe
Libby a forever debt for introducing us :-)"
"I didn't care for how I was treated by LD & others, so I yanked the trap door
lever in mid-2020."
Read those four together. "LD" in the first reply most plausibly refers to Laura Dilley, whom he recruited (above); he says he pulled the trap door on her in mid-2020. By his own account he then became brand-defense strategist and a potential witness for Schoenberger — the plaintiff suing her. Marcia Stockton is a long-running Schoenberger correspondent; "Libby" is not given a surname, and Libby Shaw — the highest-connectivity node in the co-occurrence graph above — is the natural candidate, not a proven one. In the Reddit reply he places himself with Cottle and Brennan on the Watkins exposé, the same trio the January 2020 "join the hunt" screenshot puts in one room. In April 2021 he names the Thinkin Project as the only activism he still has a hand in.
These captures carry relative timestamps ("2w ago," "18h"). The file's own rule is that nothing captured that way is cited as Documented until the absolute date and ID are pulled. What they prove today is what he said about himself — which, for a man who wrote the manipulation doctrine, is the finding.