# Quick Reference Cheat Sheet

## Organizations at a Glance

### SAFETYNET
**What:** Security and Field-Engagement Technology Yielding National Emergency Taskforce
**Role:** Covert counter-espionage organization protecting digital infrastructure
**Structure:** Agent designation 0x00 series (field analysts), 0x90+ series (senior operatives)
**Mission:** Neutralize ENTROPY operations through offensive security operations
**Cover Stories:** Security consultants, pen testers, auditors, incident responders, new hires

### ENTROPY
**What:** Underground criminal organization, cell-based network
**Goal:** World domination through cyber-physical attacks and societal destabilization
**Philosophy:** Accelerate entropy and chaos to remake society
**Structure:** 11 semi-autonomous cells with specialized operations
**Methods:** Controlled corporations + infiltrated organizations + hybrid operations

---

## The 11 ENTROPY Cells

| Cell | Specialization | Cover Organization | Focus |
|------|---------------|-------------------|-------|
| **Digital Vanguard** | Corporate Espionage | Paradigm Shift Consultants | Stealing IP, insider threats |
| **Critical Mass** | Infrastructure Attacks | OptiGrid Solutions | Power grids, SCADA, utilities |
| **Quantum Cabal** | Advanced Tech & Eldritch Horror | Tesseract Research Institute | Quantum computing, reality-bending |
| **Zero Day Syndicate** | Vulnerability Trading | WhiteHat Security Services | 0-days, exploit development |
| **Social Fabric** | Disinformation | Viral Dynamics Media | Deepfakes, bot networks |
| **Ghost Protocol** | Surveillance & Privacy Destruction | DataVault Secure | Mass data collection, tracking |
| **Ransomware Inc.** | Crypto-Extortion | CryptoSecure Recovery | Ransomware, double extortion |
| **Supply Chain Saboteurs** | Backdoor Insertion | Trusted Vendor Integration | Software/hardware compromises |
| **Insider Threat Initiative** | Recruitment & Infiltration | TalentStack Executive Recruiting | Sleeper agents, deep state ops |
| **AI Singularity** | Weaponized AI | Prometheus AI Labs | ML attacks, autonomous malware |
| **Crypto Anarchists** | Blockchain Exploitation | HashChain Exchange | DeFi exploits, 51% attacks |

---

## Main SAFETYNET Characters

### Agent 0x00 (Player)
- **Role:** Rookie field analyst
- **Growth:** Develops CyBOK expertise across missions
- **Handle:** Player-chosen codename

### Agent 0x99 "Haxolottle"
- **Role:** Senior operative, player handler
- **Personality:** Supportive, knowledgeable, eccentric
- **Catchphrase:** "Patience is a virtue, but backdoors are better."
- **Quirk:** Obsessed with axolotls

### Director Magnus "Mag" Netherton
- **Role:** SAFETYNET Operations Director
- **Personality:** Stern, bureaucratic, secretly caring
- **Catchphrase:** "By the book, Agent. Specifically, page [X] of the Field Operations Handbook."
- **Function:** Mission briefings, approvals

### Dr. Lyra "Loop" Chen
- **Role:** Chief Technical Analyst
- **Personality:** Brilliant, caffeinated, rapid-speaking
- **Catchphrase:** "Have you tried turning it off and on again? No, seriously..."
- **Quirk:** Excessive energy drinks

### Agent 0x42
- **Role:** Legendary veteran (rarely seen)
- **Personality:** Enigmatic, cryptic
- **Catchphrase:** "The answer to everything is proper key management."

---

## ENTROPY Masterminds (Background Only)

### The Architect
- **Role:** ENTROPY Supreme Commander
- **Signature:** Thermodynamic equations, ∂S ≥ 0
- **Style:** Philosophical communications about entropy

### Null Cipher
- **Role:** Chief Technical Officer
- **Suspected:** Former SAFETYNET agent
- **Signature:** Caesar-shifted messages, taunting notes

### Mx. Entropy
- **Role:** Esoteric Operations Director
- **Focus:** Quantum Cabal oversight
- **Signature:** Non-Euclidean geometry, occult symbols

---

## Common Mission Types

1. **Infiltration & Investigation** - Undercover at target organization
2. **Incident Response** - Called in after security breach
3. **Penetration Testing** - Authorized security assessment (cover)
4. **Security Audit** - Compliance review (cover)
5. **Counter-Infiltration** - Identify insider threats
6. **Data Recovery** - Secure stolen or compromised data
7. **Threat Prevention** - Stop attack before execution

---

## Technology Quick List

### Standard Field Kit
- Lockpicks (limited uses)
- Fingerprint dusting kit
- Bluetooth scanner
- PIN cracker (Mastermind mini-game)
- Access cards (found in-game)

### Digital Tools
- **CyberChef** - Encoding/encryption workstation
- **Virtual Machines** - Linux/Windows for exploitation
- **Network Tools** - Scanning, analysis

### Security Mechanisms
- Key-based locks
- PIN code systems (4-6 digits)
- Password-protected systems
- Biometric authentication
- Bluetooth proximity locks
- Multi-factor authentication

---

## Scenario Structure at a Glance

### Pre-Mission
**Briefing (1-2 min)** - Handler explains situation, cover story, objectives

### Act 1: Setup & Entry (15-20 min)
- Mission start at target location
- Initial exploration and reconnaissance
- 3+ locked areas visible (creates goals)
- Meet NPCs, establish relationships
- Something suspicious discovered

### Act 2: Investigation & Revelation (20-30 min)
- Multi-room investigation with backtracking
- "Things aren't as they seemed" twist
- Evidence gathering
- 3-5 major player choices
- Discover ENTROPY involvement
- Villain revelation

### Act 3: Confrontation & Resolution (10-15 min)
- Climactic confrontation with ENTROPY agent
- 5-6 confrontation options
- Final challenges test learned skills
- Mission completion

### Post-Mission
**Debrief (1-2 min)** - Acknowledges choices, reveals consequences, updates CyBOK specializations

---

## ENTROPY Agent Confrontation Options

When discovering ENTROPY agent, always provide:

1. **Practical Exploitation** - Use them for shortcuts/access
2. **Arrest (By the Book)** - Standard procedure, ethical
3. **Combat** - Aggressive confrontation
4. **Recruitment** - Flip them as double agent
5. **Interrogation** - Extract intelligence first
6. **Understanding** - Learn their motivations

Each has distinct consequences reflected in debrief.

---

## Tone Guidelines Summary

### Primary Tone: Mostly Serious (80%)
- Grounded cyber security scenarios
- Genuine technical challenges
- Realistic security concepts
- Professional espionage atmosphere
- Real consequences

### Secondary Tone: Comedic Moments (20%)
- Quirky recurring characters with catchphrases
- Spy trope humor (gadgets, bureaucracy)
- Puns in operation names and ENTROPY companies
- Field Operations Handbook absurdity (max 1 per scenario)
- Self-aware moments that don't break immersion

### Comedy Rules
1. **Punch Up** - Mock bureaucracy and villain incompetence, not victims
2. **Recurring Gags** - Max one instance per scenario
3. **Never Undercut Tension** - No jokes during puzzle-solving or revelations
4. **Grounded Absurdity** - Realistic situations pushed slightly

### Inspiration Blend
- **Get Smart** - Bureaucratic spy comedy
- **James Bond** - Sophisticated espionage
- **I Expect You To Die** - Environmental puzzles, villain monologues
- **Modern Cyber Security** - Real tools and techniques

---

## Scenario Minimum Requirements

**Must Have:**
- ✓ 5-7 primary objectives
- ✓ 3-4 milestone objectives
- ✓ 3-5 bonus objectives
- ✓ 5-12 rooms (tree structure, north/south)
- ✓ 1+ major backtracking puzzle chain
- ✓ 3+ NPCs (1 helpful, 1 neutral, 1 ENTROPY)
- ✓ 3-5 major narrative choices
- ✓ 1+ moral dilemma
- ✓ ENTROPY agent confrontation (all options)
- ✓ 4+ different lock types
- ✓ 2+ cryptographic challenges
- ✓ 3-5 LORE fragments
- ✓ Briefing + debrief cutscenes
- ✓ 3+ ending variations
- ✓ ~60 minute playtime

---

## Design Principles Quick Hits

1. **Puzzle Before Solution** - Present challenges before tools
2. **Non-Linear Progression** - Require backtracking between rooms
3. **Multiple Paths, Single Goal** - Different approaches, same objectives
4. **Physical-Cyber Convergence** - Combine both security domains
5. **Progressive Disclosure** - Fog of war, gradual reveals
6. **Moral Ambiguity** - Grey choices without obvious "right" answer
7. **Educational First** - Cyber security accuracy over convenience
8. **Self-Contained Stories** - Complete operation in ~1 hour

---

## CyBOK Knowledge Areas (19 Total)

Primary areas commonly featured:
1. **Applied Cryptography** - Encryption, hashing, key management
2. **Human Factors** - Social engineering, trust, security culture
3. **Security Operations** - Incident response, monitoring, forensics
4. **Network Security** - Protocols, firewalls, intrusion detection
5. **Malware & Attack Technologies** - Exploits, viruses, attack vectors
6. **Cyber-Physical Security** - SCADA, ICS, embedded systems
7. **Systems Security** - OS hardening, access control, authentication

**Design Goal:** Each scenario covers 2-4 CyBOK areas explicitly.

---

## Field Operations Handbook (Sample Rules)

Use max 1 per scenario for comedic effect:

- **Section 7, Paragraph 23:** "Agents must identify themselves... unless doing so would compromise the mission, reveal their identity, or prove inconvenient."
- **Protocol 404:** "If a security system cannot be found, it does not exist. Therefore, bypassing non-existent security is both prohibited and mandatory."
- **Regulation 31337:** "Use of l33tspeak is strictly forbidden, unless it isn't."
- **Appendix Q, Item 17:** "Expense reports must specify 'manipulation via caffeinated beverage' rather than 'coffee'."

---

## Quick Mission Design Workflow

1. **Pre-Production** - Concept, learning objectives, ENTROPY cell
2. **Narrative Outline** - Complete 3-act structure BEFORE technical design
3. **Technical Design** - Rooms, puzzles, security mechanisms
4. **NPC Design** - Characters, dialogue, trust levels
5. **Implementation** - JSON scenario + Ink dialogue scripts
6. **Testing** - Designer playtest + fresh player test
7. **Polish** - Fix bugs, balance difficulty, refine dialogue

---

## Common Mistakes to Avoid

❌ **Linear room-by-room progression** → ✓ Interconnected puzzles with backtracking
❌ **Solution before puzzle** → ✓ Encounter challenge before finding tool
❌ **Single narrative path** → ✓ Meaningful branching choices
❌ **Technical inaccuracy** → ✓ Real cyber security concepts
❌ **Undercut tension with jokes** → ✓ Comedy in briefings/debriefs only
❌ **Punish creative solutions** → ✓ All approaches valid with different consequences
❌ **Too many Field Handbook jokes** → ✓ Maximum one per scenario
❌ **Ignore player choices in debrief** → ✓ Explicitly acknowledge decisions
