Each month a capsule is deployed into the city. It holds one object. Numbered, dated, irreplaceable.

Before it surfaces, keys are released into the city. Shards fragment close by. Locate them. Hold them.

A key must be logged to the network the moment it is found. An unlogged key is not on record — it is void when the capsule surfaces, regardless of who holds it. Discovery is not possession until it is registered.

One key per operative. One shard per operative. Holding more than one of either voids both. A key that comes into contact with another key before reaching the capsule is considered compromised — the system will reject it.

One key opens the capsule. Shards grant access to restricted objects at the event. These are separate credentials. Neither is lesser.

Once gone, the contents of the capsule do not return.