Skip to content

XP & Progression

GRIMOIRE Public is built around earned-not-given progression. You start with a 10-tool starter kit and 5 intro labs, and you build the rest of your toolkit, your authority, and your reputation through play. Everything ships pre-bundled in the ISO; XP grants execution permission via Curtain v3 capability tokens.

The system is implemented in the synos-progression crate — 57 tests, 111-entry seed catalog, integrated with the Bevy SkillTree plugin for visual unlock animation.

Out of the box on GRIMOIRE Public:

ToolWhy it’s in the starter kit
nmapPort scanning — universal language of recon
wiresharkPacket capture — see what’s actually on the wire
netcatThe Swiss Army knife of TCP
curlHTTP probing, header manipulation
tcpdumpHeadless packet capture for SSH-only sessions
straceTrace syscalls — understand what a binary actually does
ltraceTrace library calls — one layer up from strace
hexdumpRead raw bytes when text utilities lie
binwalkFind embedded files and entropy boundaries
stringsExtract printable strings — the dumbest tool that wins

Plus 5 intro labs covering basic recon, web inspection, and binary analysis.

XP = base × difficulty_multiplier × (1 - hint_penalty) + faction_bonus + cert_track_bonus
DifficultyBase XPMultiplier
Beginner1001.0×
Intermediate2501.5×
Advanced5002.0×
Expert1,0003.0×
Legendary2,5005.0×
  • Hint penalty — each hint reduces the lab’s XP award by 10–25 % depending on hint depth
  • Faction bonus — completing a lab inside your faction’s specialty stack multiplies the award
  • Cert track bonus — labs aligned with an active cert path you’re pursuing pay extra
  • Streak bonus — 5 in a row without hints unlocks a cooldown-skip token

The progression system organises content into five tiers. Each tier requires both XP threshold and completion of a tier-gate lab.

TierThresholdTier gateSample unlocks
0 — Initiate0 XPFirst boot wizardStarter kit + 5 intro labs
1 — Apprentice1,500 XP”First Foothold” Beginner lab gatenikto, gobuster, enum4linux, dig, whois, AD recon labs
2 — Journeyman6,000 XP”Pivot or Perish” Intermediate gatemetasploit-framework, crackmapexec, bloodhound, web app labs
3 — Master Class18,000 XPAdvanced certification-aligned challengeRE labs, malware sandbox, cloud labs, full Purple Team track
4 — Expert50,000 XPExpert-tier boss contractAI security labs, blockchain labs, war-game participation
5 — Sovereign150,000 XPSalvage Yard chapter complete + peer-verified solutionFull ALFRED Master mode (where allowed by Curtain), mesh node leadership

GRIMOIRE labs are tagged with the cert paths they prepare you for. Activating a cert track in your profile triples relevant lab payouts and gives you a study-roadmap view in the SkillTree plugin.

Cert familyTracks supported
Offensive SecurityOSCP · OSEP · OSWE · OSCE³
SANS / GIACGPEN · GWAPT · GCIH · GCFA · GREM · GMON
(ISC)²CISSP · CCSP
EC-CouncilCEH · CHFI
INEeJPT · eCPPT
CloudAZ-500 · SC-100 · CCSP-AWS
Defensive vendorSplunk Core/Power · Sentinel · Elastic

Activating a track does not commit you — you can swap any time. The SkillTree plugin animates a “what’s next?” recommendation engine driven by ALFRED’s hippocampus crate (long-term memory consolidation of your performance patterns).

A long-form questline that graduates a player from CTF novice to running their own encrypted mesh:

  1. Initiate — finish the 5 intro labs
  2. Apprentice — pick a faction, complete the faction onboarding chapter
  3. Journeyman — complete one lab from each of 8 of the 13 categories
  4. Master Class — earn one peer-verified solution (your write-up reviewed by a tier-3+ player)
  5. Expert — survive a full war-game season and finish in the top 25 % of your faction
  6. Sovereign — complete the Salvage Yard arc (build a 3-node ARCANUM mesh from reclaimed hardware, run a local LLM on it, host an instance of GRIMOIRE for at least one other player)

Sovereign-tier players can host their own GRIMOIRE instances, federate (within the GRIMOIRE tier) with other Sovereigns, and earn the Sovereign Operator credential — peer-issued, verifiable on-chain via the synos-audit-trail HMAC-SHA256 chain.

XP does not promote you to Master. It cannot. Curtain v3 enforces a hard ceiling regardless of progression:

  • AI dispatch syscalls 470–474 always return ENOSYS
  • LLM federation stays tier-isolated to GRIMOIRE peers
  • Audit chain HMAC roots stay separated
  • Fragment Field IDS kernel-side detection stays Master-only

This is by design: GRIMOIRE produces operators; Master is what gets sold to customers who need the actual weapon for actual work.