# Scenario: The Phishing Inbox

This is the default learning scenario. Reference doc — matches the
`phishing` entry in `SCENARIOS` inside `deadline-run.html` exactly. Useful
for understanding the shape of a scenario before writing a new one.

**To activate it:**

> Switch the active scenario to phishing.

## The setup

Bob is seated at the reception desk at the start of the level.

**Start screen headline:** "SOMETHING'S IN BOB'S INBOX."

**Bob says:** "Hey — I think I might be getting phished? Kate keeps telling
us to check. Can you look at my inbox real quick?"

## The document

`assets/game/docs/doc-phish-email.png` — a mocked-up email inbox. Correct
finds are marked with a red flag outline (`markStyle: 'flag'`).

**Instruction bar:** "Bob's inbox — click everything that says this is a
scam."

**The three things to find** (clickable regions are listed in
`assets/game/docs/hotspots.json` under `doc-phish-email`):
- `sender` — the address is a fake helpdesk domain, not the real one.
- `creds` — it asks him to reply with his username and password.
- `link` — the "verify your account" button points at that same fake
  domain.

There's a fourth hotspot in the same document (`urgency` — the pushy tone
of the email) that does **not** count as one of the three required finds.
Clicking it gets a nudge instead: "I mean, it IS pushy... but that's not
the proof."

**A wrong click on anything else says:** "Nah, I don't think that's it —
look again."

**When all three are found, Bob says:** "Knew it. Thanks — I almost
clicked that."

## The mission (Bob's three-beat briefing, each beat advances on SPACE)

1. "Knew it. Go tell Kate in HR before someone clicks it — she can warn
   the whole building!"
2. "Oh, and watch out for the electrical pits. Facilities is 'renovating.'
   Use the cables!"
3. "Oh no — it's 4:59. Kate leaves at five. GO!"

## Winning

**When the player reaches Kate:** eyebrow "WARNED THE BUILDING", headline
"CAUGHT IT!"

**Near miss (time runs out just barely too late):** "Kate got the word
out... just as someone clicked. Moments too late."

**Loss (ran out of time or got zapped):** "Someone clicked before you
reached Kate. The office loses this round — until coffee."
