diff --git a/planning_notes/overall_story_plan/mission_initializations/m03_ghost_in_the_machine/stages/stage_6/lore_fragments.md b/planning_notes/overall_story_plan/mission_initializations/m03_ghost_in_the_machine/stages/stage_6/lore_fragments.md
new file mode 100644
index 0000000..bf11e5a
--- /dev/null
+++ b/planning_notes/overall_story_plan/mission_initializations/m03_ghost_in_the_machine/stages/stage_6/lore_fragments.md
@@ -0,0 +1,102 @@
+# Mission 3: LORE Fragments - "Ghost in the Machine"
+
+**Mission ID:** m03_ghost_in_the_machine
+**Title:** Ghost in the Machine
+**Stage:** 6 - LORE Fragments Creation
+**Date Created:** 2025-12-27
+
+---
+
+## Overview
+
+**ENTROPY Cell:** Zero Day Syndicate
+**LORE Fragment Count:** 3
+**Fragment Type Distribution:**
+- Historical/Background: 1 (Fragment 1)
+- Evidence Documents: 2 (Fragments 2 & 3)
+
+**Narrative Purpose:**
+Mission 3 LORE fragments reveal Zero Day Syndicate's role as ENTROPY's "arms dealer" - the cell that provides exploits to other cells for targeted attacks. The fragments expose the calculated harm-for-profit business model and The Architect's coordination of multi-cell operations.
+
+---
+
+## LORE Fragment 1: Zero Day - A Brief History
+
+**ID:** `lore_fragment_1`
+**Category:** Historical / Organization Background
+**Type:** Internal Company Document
+**Length:** 178 words
+**Discovery Location:** Executive Office - Filing Cabinet (lockpicking required)
+**Difficulty:** Medium (requires accessing locked executive office + lockpicking filing cabinet)
+
+### Content
+
+```
+═══════════════════════════════════════════════════════
+ZERO DAY SYNDICATE - INTERNAL COMPANY HISTORY
+WhiteHat Security Services (Founded 2010)
+For Internal Use Only
+═══════════════════════════════════════════════════════
+
+FOUNDING PHILOSOPHY (Victoria Sterling, CEO):
+
+"The traditional security industry operates on a flawed
+model: discover vulnerabilities, report them, wait for
+patches. This creates a power imbalance. Vendors control
+the timeline. Researchers are underpaid.
+
+We recognized a market inefficiency. Vulnerabilities have
+inherent value. Why give that value away?
+
+WhiteHat Security provides legitimate penetration testing
+services to maintain our business facade. But our true
+revenue stream: the Zero Day marketplace.
+
+We discover. We price according to market demand. We sell
+to interested parties. What they do with our research isn't
+our concern—we're security professionals, not moralists.
+
+Think of us as liquidity providers for the vulnerability
+market. Every system tends toward disorder. We simply
+monetize that entropy."
+
+REVENUE MODEL:
+- Front business: $2.3M/year (pen testing services)
+- Zero Day sales: $18.7M/year (exploit marketplace)
+- Sector premiums: Healthcare +30%, Energy +40%, Finance +25%
+
+MOTTO: "Security Through Economics"
+```
+
+### Design Notes
+
+**Narrative Function:**
+- Establishes Victoria Sterling's "free market" rationalization
+- Shows dual business model (legitimate facade + criminal operations)
+- Introduces "monetize entropy" philosophy (connects to ENTROPY mythology)
+- Reveals revenue comparison (criminal operations 8x more profitable)
+
+**Voice:** Corporate-professional with ideological underpinning, Victoria's economic rationalization
+
+**Player Value:**
+- Understand Zero Day's business model
+- See Victoria's philosophy in her own words
+- Recognize the calculated nature of their operation (not chaotic criminals)
+- Historical context for WhiteHat Security's founding
+
+**Evidence Quality:** Background document (not direct evidence of specific harm, but establishes premeditation)
+
+**Variable on Discovery:** `found_zero_day_history = true`
+
+**Debrief Acknowledgment:**
+```ink
+{found_zero_day_history:
+    Agent 0x99: You found Zero Day's founding document.
+    Agent 0x99: "Monetize entropy." They turned suffering into a business model.
+}
+```
+
+---
+
+**Status:** 🔄 IN PROGRESS (Part 1/3 - Fragment 1 complete)
+**Next:** LORE Fragment 2 (Q3 2024 Exploit Catalog - EVIDENCE)