Rules card
Triangle and roll · one per table · read at Decision 1
Every seat holds it
Contain a fast-moving malware incident by resourcing, authorising and defending your technical team's response, before it spreads and before the business pays more than it can afford.
Security, Financial and Reputational, four steps each: Steady, Strained, Serious, Critical. All start Steady. "One step worse" moves right. A risk never goes past Critical.
Three minutes on the table timer. One sentence from each seat. The table sets the triangle. Every seat lays a card, A, B or C, face down, and all reveal together. A choice needs a strict majority on this ladder: 3 of 4, 3 of 5, 4 of 6, 4 of 7, 5 of 8 seats. A tie fails.
No resolution. The card's option C applies with its printed cost and its complication, no roll, no triangle effects.
12 points across Money, Time and Quality, 4 each at the start, between 1 and 8 on each arm. Money pairs with Financial, Time with Security, Quality with Reputational.
7 or more on an arm cancels one printed step on its paired risk. 2 or less adds one step to it, once. The triangle returns to 4, 4, 4 after every decision.
Only in doubt: if the option fits the facts and its groundwork is done, it succeeds without a roll. Otherwise roll against the target the card prints (automatic, 10+ or 15+). Add +1 for each other seat that backs the carried option with a concrete commitment, up to +3, and the proposing seat's specialty grade (+3, +2 or +1 from its role card) when the narrator rules it applies. The proposing seat is the seat holding that decision's card, since the vote is face down and no seat puts its name to an option. There is no card-holder bonus. Target met is Full. 1 to 3 below is Partial: the result plus a narrated complication, no board move. 4 or more below is Failure.
Two marks: Ways in shut and Leak stopped. Both must be ticked. The cards and chips tell you when to tick them.
Rules source core/rulings.md and core/resolution-rules.md.
[Malware & Management · scaled version]
[Rules card]