CONNECTION / UNRESOLVED

No signal found.

Your entry point is elsewhere, Agent.

Find the terminal at Stone Signal Labs →

Follow the signal through the public-site terminal. This story gate is not account security; verified-email login is still required.

STONE SIGNAL LABS RANGE / FIVE OPERATIONS
Checking range

Establishing trusted range session

Acquiring signal.

Connecting to the GHOST SIGNAL control plane…

CTF player guide

Start here

  1. Create a passkey account and confirm your email. Returning players can use a passkey, email link or recovery code.
  2. Read and accept the Rules of Engagement. The website itself is never an attack target.
  3. Open the recommended mission. Read the objective, download the files and analyze them on your computer.
  4. For a structured task, check your findings to obtain a flag. Submit the flag and assistance declaration to record the solve.

Need a hand? Each mission has a problem-report form. Read staff responses in Investigations → Reports. For account access or a platform security concern, use the contact options on Stone Signal Labs security. Never send passkeys, recovery codes or live credentials.

A worked example

This small demonstration is separate from the scored campaign and contains no player evidence or mission solution.

Question: Which fictional account signed in successfully?

09:00 account=analyst-one outcome=denied
09:01 account=analyst-two outcome=success

Reasoning: The second record is the only successful sign-in. The account is analyst-two; cite the 09:01 record. Do not infer that the denied attempt also succeeded.

In a mission you would enter the required findings, check them, then submit your personalized flag. A correct answer should be supported by a specific record, not just a plausible story.

How the range fits together

Campaign
The main sequence of 75 missions.
Operation
One of five groups of 15 missions. A sector is a phase within an operation.
Mission / challenge
One task with an objective, evidence files and a scored submission. Available means ready to play; sealed means prerequisites remain; proven means solved.
Notes / casebook / dossier
Your analytical notes. Case notes collects the missions with work saved on this device.
Investigation
A longer, separate case. Practice supports learning; assessment records a separate score out of 100. Neither changes campaign points.
Flag
The personalized answer token you submit to record a mission solve.
Evidence seal
A record associated with an accepted solve. It is not professional certification.

Save and switch devices

Campaign notes and answer drafts save locally as you type. Use Save to account to keep notes and your answer draft across devices, and Load account copy to retrieve them. Team saves share notes only: answers are personalized. Download receipts and downloaded files stay on the original device.

Investigation drafts also save locally as you edit. Save workspace explicitly to update the selected account or team copy. If someone saved a newer version, export your draft before loading and merging their changes. Shared notes are not a live collaborative document.

Clearing browser data can erase local drafts and receipts. Export important work. A local save confirmation does not mean a cloud save.

Allowances and troubleshooting

Site-wide daily limits are 10 GiB evidence downloads, 2,000 preparations and 50,000 protected requests. Email links are limited to five per recipient and 100 site-wide daily. All daily limits reset at 00:00 UTC. Short-window limits also apply.

If preparation is queued, leave the transfer open or retry later. For a daily-limit message, wait until the reset; repeated retries will not restore allowance. A failed or cancelled attempt may consume allowance. Your saved progress is retained.

If email is delayed, check spam and confirm the address before requesting another link. If a transfer stops, investigation downloads can resume in the same browser. Folder downloads require a compatible browser; individual downloads remain available. There is no need to scan or probe the platform.

CTF privacy

Your account stores identity and access settings, confirmed email, progress, scores and assistance declarations. Campaign integrity records include limited timing and evidence-access signals; they are not proof of misconduct and do not automatically alter scores.

Campaign flag submissions and lab answers are not retained by the verifier. Notes and answer drafts are stored in your account only when you explicitly save them; team notes are visible to team members. Investigation submissions and methodology are retained privately for assessment and optional staff review. Local drafts and download receipts reside in your browser.

Your callsign, campaign scores and declared tool track appear in standings. Publishing your solve profile is a separate choice. Team casebooks remain with the team after a member leaves. Export and account-deletion controls are in Account settings; clearing local browser data is a separate action.

Email delivery and AWS hosting process requests needed to operate the service. These statements about application telemetry are not a claim that infrastructure providers keep no operational logs. Read the company privacy information for the broader policy and contact route.

Human review

A 100/100 automated assessment is separate from a human-reviewed defense. Review requests enter a staff queue; reviewer availability and response times are not guaranteed. Check your investigation status and issue responses for follow-up. If staff request clarification, explain your evidence and reproducible method. Neither a score nor a review is an accredited certification.
CELL 07 / AUTHORIZATION GATE / —

Before the first signal

Confirm the boundary.

This range is designed for experienced practitioners, but authorization still ends at the simulator boundary.

Read all current policy clauses
    Read the full rules

    Account recovery

    Keep the operation recoverable.

    A recovery code grants access to this operator, including any account and team membership. Store it securely. The range stores only a peppered hash and shows the code once. Recovery signs out other devices.

    Create or rotate your code.

    Checking recovery status…

    Restore an existing operator.

    Restoration can replace only a fresh zero-progress session and rotates the recovered session’s anti-forgery token.