**Technical Guidance Improvements:**
- Added basic Linux commands to Agent 0x99 help (ls, cd, cat, ls -la)
- Added sudo commands (sudo -l, sudo -u username bash)
- Players no longer expected to research basic Linux syntax
- Discovery now focuses on WHERE to apply commands, not WHAT commands exist
**Kevin Contingency Discovery (Major Change):**
- Opening briefing now hints: "Derek might have contingencies, scapegoats"
- Agent 0x99 doesn't know about Kevin frame-up beforehand
- Player discovers contingency files in Derek's computer
- New event_contingency_found: Handler reacts with shock to player's discovery
- "I suspected Derek might have failsafes, but I didn't know about this specifically"
- Handler leaves decision to player: "Kevin's fate is in your hands now"
**Design Philosophy:**
- Commands are tools (provided)
- Discovery is in application (where, when, why to use them)
- Major plot revelations belong to player (Kevin's frame-up)
- Handler has suspicions, not omniscience
- Player feels accomplished for discovering evidence
**Updated Documentation:**
- INTEL_THREADS_SUMMARY.md reflects balanced approach
- Thread #3: Linux commands provided, application discovered
- Thread #4: Sudo commands provided, execution discovered
- Thread #6: Kevin contingency now player discovery with handler reaction
This creates better gameplay: players have tools to succeed but must
discover HOW to use them and WHAT they reveal.
Updated informant NPCs to provide incomplete intel that requires
player investigation and correlation:
**Agent 0x99 (Handler) Changes:**
- Removed exact command syntax (e.g., Hydra commands)
- Replaced step-by-step instructions with general concepts
- Made Linux/SSH help exploratory rather than prescriptive
- Removed specific file/evidence locations
- Encourages discovery through investigation
**Kevin (IT Manager) Changes:**
- Changed from "Derek uses birthday 0419" to hints about
"important dates" and checking calendars
- Password patterns mentioned generally (ViralDynamics + dates)
rather than specific passwords
- Player must correlate hints with office environment
**Maya (Content Analyst) Changes:**
- Added "Operation Shatter" as overheard fragment
- Mentions Derek's suspicious behavior without providing proof
- Expresses uncertainty rather than complete knowledge
- Points player toward investigation
**Intel Discovery Design:**
- NPCs provide fragments, not complete solutions
- Multiple sources must be correlated
- Physical environment holds key evidence (calendars, notes)
- Technical knowledge discovered through research/experimentation
- 7 major intel threads documented with discovery paths
**New Documentation:**
- Added INTEL_THREADS_SUMMARY.md documenting how intel
fragments lead to evidence discovery
- Maps correlation between NPC hints, environment clues,
and player investigation
- Details success metrics and stuck player recovery
This creates a more engaging investigation experience where
players piece together evidence rather than following explicit
instructions.
