The game

A perfectly respectable castle.

Beyond the fog stands a company with things to protect. It has walls, gates, people going about their work and a reassuring belief that everyone inside belongs there.

You begin outside.

You play AttackPathMan, a small hooded adventurer with a considerable interest in places he hasn't been invited. The company has never heard of you. You have no corporate identity, no access and very little idea what is waiting behind those walls.

Your task is simple enough to fit on a signpost: get in, find what matters, keep a way back.

The complications begin shortly afterwards.

Who you are changes what you can see.

An identity can carry an entire world with it. Someone's files. Their conversations. The applications they use. The places they're allowed to go, and the people who trust them to be there.

Step into that identity and parts of the world come into view. A door that meant nothing to you becomes a way forward. A familiar-looking workspace turns out to be connected to somewhere rather more interesting.

The system believes you're someone it knows.

You may wish to avoid correcting it immediately.

A map of your questionable decisions.

Explore rooms, inspect what you find and test the connections between them. Some discoveries will take you further. Others will send you down a branch you may eventually describe as thorough research.

As you uncover relationships and act on them, your path takes shape. Each connection records something you've learned or done. A wrong turn can tell its own story.

You choose where to investigate next. What you discover changes what becomes possible.

Someone has noticed.

A route comes under scrutiny. A session ends. An identity that opened doors a moment ago suddenly stops working.

The defenders are responding, and you're still in the middle of your adventure.

Suspicious actions can draw attention. Access can disappear. Another way back may keep you in the game, provided you found one and the defenders haven't removed it too.

What you've learned stays with you. Reaching it again is a separate problem.

The security team would like to thank you for your cooperation. They are prepared to proceed without it.

The identity that escaped.

The first chapter draws on a real security incident from 2022, told through a fictional company and a world you can explore.

At the end, you'll be able to look back at your route and compare it with the documented incident. The game will distinguish what the evidence supports from the alternative possibilities created for play.

Behind the castle, the borrowed identities and your increasingly awkward relationship with its security team is a problem that reaches well beyond the game: how separate decisions about access and trust can join together into a path.

You can start with curiosity. The technical detail will be there when you want to look closer.