security-game/TODO.md

TODO

Godot 4.3 prototype. Release v0.2.2 is tagged from the session-shell commit; CI builds the installers and AppImage. Headless suite 88/88, plus smoke_session_shell.gd and the windowed focus/radial smoke.

Host REQUIRE_SIGNIN_VIEW stays deferred.

Remaining PLAN verbs (radial exists)

• Eye contact as a Level 1 action (PLAN / glossary). Distinct from raise-hand. Add a radial slice if it ships.
• "I recognize this person" is a player decision recorded as evidence, not a pre-attached artifact on every staff/guest type. Staff still auto-recognize when override_access is empty (AccessLoadout).
• Formal warning can activate the body-camera / security-light flag (PLAN Level 2). Overlay is currently always on; toggling should write an incident event.
• Blocking stations the guard between the person and the door (PLAN Level 3). Today it only sends apply_player_action(BLOCKING).
• "Request reason for entry" as a Level 3 ask, with a short NPC reply from dialogue_lines.

Crowd presentation

CrowdSystem is a mood/attention float. PLAN wants people watching, gathering, and panicking.

• On aggressive_behavior / emergency_responder, nearby idle NPCs stop and face the incident (rubberneck). On crowd_panic, they move away from the door.
• Profile a busy entrance with textured materials and props; add LOD or culling for distant NPCs if frame time drops.

Emergency aftermath

Responder outcomes (command / restraint / evacuation / arrest) are log lines. PLAN also wants evacuation, a closed street, and an investigation when the call was unjustified.

• evacuation outcome actually clears the entrance (NPCs leave, door stays locked).
• Unjustified emergency (low danger, no weapon) writes an investigation note on the shift review and applies the existing false-report / reputation hit.
• Review copy names the responder outcome, not only battery and crowd %.

Body-camera replay

• Shift review: a timeline of recorded incident events (ADR-0005 already stores them). Scrub or step through; no live 3D replay required in the first version.

NPC theater

Intents sit / photo / film / perform already pick waypoints. ADR-0010 rig (face/hair) is in the working tree. Bodies still idle-stand at those spots.

• Sit pose at steps_end. Photo: brief raise of the influencer/tourist prop. Performer stays put and plays the hat/sign.

Audio

AudioFeedback is sine beeps. DONE called that "crowd ambience"; it is not.

• Loop a low crowd bed that rises with CrowdSystem.mood.
• Radio open/close crackle on the existing radio panel, still headless-safe (no-op without an audio server).

Accessibility

• Escalation colors that still read in grayscale (shape or label, not hue alone).
• HUD font scale in settings.

Scenario content still missing vs PLAN lists

• Joke Shop: guest on the reservation list without ID; borrowed/mismatched ID; guest refuses wand screening; late arrival during a performance.
• Studio: filming-boundary repeat (influencer ignores a posted line); celebrity-arrival crowd spike (more rubberneckers, not only one arrive spawn).
• Building: "activate body camera" and "request reason" once those verbs exist, used in at least one authored event.

Distribution follow-up (host config, deferred)

Verified via API+host credentials (2026-10-31):

• Repo is public (private:false) and account has admin rights.
• Release v0.2.1 now carries all five artifacts (portable binaries + NSIS installer + AppImage).
• Remaining host setting: instance-wide [service] REQUIRE_SIGNIN_VIEW=true makes anonymous browsing/downloads redirect to login. Host admin: REQUIRE_SIGNIN_VIEW = false under [service] in app.ini, restart Gitea. Alternative: mirror downloads.

Open Polish

• Keep % placeholders stable in Strings.fmt when adding keys (positional formatting).

Tooling (when an editor workflow exists)

• IDE/editor-based GUT integration. Until then the custom headless runner stays.
• Optional later: author venues as .tres resources instead of ScenarioFactory functions.