# Scenario: The HIPAA Redaction

The second built-in learning scenario. Reference doc — matches the `hipaa`
entry in `SCENARIOS` inside `deadline-run.html` exactly.

**To activate it:**

> Switch the active scenario to hipaa.

## The setup

Bob is seated at the reception desk at the start of the level.

**Start screen headline:** "ONE FORM, ONE LAST LOOK."

**Bob says:** "Hey, I was gonna give this to Kate, but I'm not sure if
there's any PHI in it. Can you check it for me?"

## The document

`assets/game/docs/doc-hipaa-form.png` — a mocked-up prior-authorization
form. Correct finds get painted over with an opaque black redaction bar
(`markStyle: 'redact'`).

**Instruction bar:** "Bob's form — redact every piece of protected health
information."

**The three things to find** (clickable regions are listed in
`assets/game/docs/hotspots.json` under `doc-hipaa-form`):
- `name` — the patient's name.
- `dob` — the date of birth.
- `mrn` — the medical record number.

**A wrong click says:** "That part's fine, I think — look for anything
that IDs her specifically."

**When all three are found, Bob says:** "Phew. That would have been a
breach."

## The mission (Bob's three-beat briefing, each beat advances on SPACE)

1. "Phew. Get that to Kate so she can fax it before five — her line closes
   at five sharp!"
2. "And mind the electrical pits. Facilities is 'renovating.' Swing the
   cables, don't jump it."
3. "Oh no — it's 4:59. Kate's fax line closes at five. GO!"

## Winning

**When the player reaches Kate:** eyebrow "FAXED IN TIME", headline
"DELIVERED!"

**Near miss (time runs out just barely too late):** "The form reached
Kate... still half-exposed. Compliance has thoughts."

**Loss (ran out of time or got zapped):** "5:00 hit before the form
reached Kate clean. Try again — until coffee."
