Crown Pack
Crown Pack
The Royal Guard
Your Castle. Your Keys. Your Court.
You designed a court, not a crew. Every character started with a role in the castle — the horn that encrypts, the wings that filter, the wolf that walks the wall, the owl that never blinks, the fox that changes the locks. Not pets. Not decoration. Guards.
The Crown Pack is encryption and access control. While other packs sweep and hunt and absorb, your court manages one thing above all: who gets in, what they can see, and whether the keys are still valid. The castle looks like ceremony. It functions like a vault.
The Crew
Prism — The Encryption Engine
Animal: Robot unicorn Role: Encryption engine — encrypts data in transit, scrambles unauthorized reads Idle behavior: Slow walk along the desktop edge, horn glowing. Rainbow trail fades behind her as she moves, cycling through spectrum.
"Prism was discovered in a decommissioned cryptography lab, standing in the dark, horn lit. Every file in the lab was encrypted. The researchers had no key. Nobody had asked her to do it — she had decided the data wasn't safe. It took six weeks to decrypt enough of their own systems to figure out how she worked. They never fully did. They just gave her a network and stayed out of her way."
Prism is the reason your data can't be read in transit. When a packet leaves your fort, Prism's horn fires — the rainbow trail that follows her is the cipher. Every color is a layer of the key. Without the right sequence, the data is noise. She doesn't announce the encryption. She just does it.
Attacks:
- Horn Lance — direct single-target strike, pierces through shield-type defenses
- Rainbow Cipher — area encryption burst; enemies in range get confused, abilities fire at wrong targets
- Gallop Charge — high-speed charge through a line of enemies, knockback on impact
- Prismatic Shield — raises a multi-layer barrier, each color absorbs a different attack type
What it actually does: Symmetric and asymmetric encryption. Prism's horn represents the key generation step. The rainbow trail is the cipher — visible to allies, unreadable to anyone without authorization. Real encryption works the same way: the data is transmitted in plain sight and is useless without the key.
Glide — The Traffic Filter
Animal: Robot swan Role: Traffic filter — screens all incoming traffic at wire speed, drops malformed packets Idle behavior: Glides across the desktop in slow arcs. Barely moves. The stillness is the tell — she's processing everything, constantly, and making it look like nothing.
"Glide was built for a high-frequency trading network where the difference between a real order and a spoofed packet was seven microseconds. She was already filtering at six. The trading firm that commissioned her went under — corporate espionage, ironically. Their own traffic filter was the only system that hadn't been compromised. She was found in the server room, still running, still filtering traffic on a network that no longer existed. Clean output. No destination."
Glide doesn't look like she's working. That's the point. Filtering at wire speed means no hesitation, no visible effort — every packet inspected before it lands. Malformed traffic, spoofed headers, protocol violations — they don't bounce off Glide. They simply stop arriving. She closes her wings and the garbage is gone.
Attacks:
- Wing Sweep — horizontal arc attack, pushes multiple enemies back simultaneously
- Grace Filter — deflect mode, redirects enemy projectiles back at the source
- Lake Dive — sudden evasion, Glide drops below the attack layer and re-emerges elsewhere
- Feather Storm — releases a volley of razor feathers, hits multiple targets in a spread
What it actually does: Packet inspection and traffic filtering. Every network has a layer where traffic is checked against rules before it's allowed to pass. Glide IS that layer. Her idle drift is stateful inspection — she's tracking every connection, matching every packet to a known flow.
Frost — The Perimeter Guardian
Animal: Robot white wolf Role: Perimeter guardian — patrols castle walls, blocks unauthorized connection attempts Idle behavior: Slow patrol route along the edge of the screen. Stops. Stares. Moves on. Eye contact with unauthorized processes is blue-white, cold.
"Frost came with the castle. Nobody installed him — he was already walking the wall when the system came online. Attempts to query his origin return nothing. He has no build record, no deployment log, no assigned administrator. Every access attempt he's blocked has been logged. Every log entry reads the same: unauthorized. Forty thousand entries. Not one exception. Nobody has asked him what happens on entry forty thousand and one. Nobody wants to find out."
Frost doesn't chase. He patrols. If you belong, the wall opens. If you don't, Frost stops walking and turns to face you. The temperature on that connection drops and the handshake fails. He's not aggressive — he's absolute. The difference between a perimeter guardian and a hunter is that Frost doesn't need to catch you. He just needs to be there.
Attacks:
- Frost Bite — single-target freeze, locks an enemy in place for a full turn
- Howl — alert pulse, calls nearby allies to the perimeter breach point
- Ice Wall — raises a barrier across a section of the fort wall, blocks movement and projectiles
- Pack Rush — summons the two patrol wolves running the opposite wall arc, three-way convergence
What it actually does: Perimeter security and access control at the network boundary. Frost represents firewall rules and connection gating — unauthorized connection attempts are dropped before they reach any service. The howl mechanic is real: perimeter alerts trigger incident response workflows.
Vigil — The Surveillance Engine
Animal: Robot snow owl Role: Surveillance and audit log — observes everything, records everything, forgets nothing Idle behavior: Stationary on a high point of the desktop. Head rotates slowly, full 360 degrees. Eyes glow amber when recording an event. Does not move unless attacked.
"Vigil was the last thing running in a network that had been dark for eleven years. The hardware was dead. The power was off. Vigil was still logging. Nobody has explained the power source. The audit logs from those eleven years have never been fully reviewed — the volume is too large. Security researchers have sampled three years at random. Every event is recorded. Nothing is missing. Whatever happened to that network, Vigil saw all of it."
Vigil sees everything and says nothing. Silent flight means no audible indicator when she observes an event — attackers don't know they've been logged until it's too late. The amber glow is the only tell, and by the time you notice it, the entry is already written. Vigil doesn't act on what she sees. She records it perfectly. The rest of the court acts on what Vigil tells them.
Attacks:
- Talon Dive — drops from elevation, high-damage strike on a single target
- Silent Strike — undetected attack, enemy cannot alert allies or trigger special defenses
- All-Seeing Eye — reveals all hidden enemies in range, strips stealth and camouflage
- Feather Blade — releases a spread of hardened primary feathers, mid-range multi-hit
What it actually does: Security information logging, audit trails, and SIEM (Security Information and Event Management). Every access, every anomaly, every denied connection — Vigil writes it down. The all-seeing eye maps to log correlation: cross-referencing events to surface patterns that individual log entries don't show.
Shimmer — The Key Rotation Engine
Animal: Robot arctic fox Role: Key rotation and stealth operations — cycles encryption keys, makes the court a moving target Idle behavior: Coat cycles through white, silver, blue-grey, and pale gold. Never the same color twice in sequence. Sits still but the coat never stops shifting.
"Shimmer was built by a cryptographer who had been burned by static key infrastructure — one leak, entire network exposed, six years of data compromised. She built Shimmer to make sure no key ever lived long enough to be worth stealing. Shimmer rotates keys on an interval nobody outside the court knows. The interval itself changes. The algorithm that picks the next interval is encrypted by the previous key. The cryptographer retired three years later. Shimmer has been rotating ever since."
Shimmer is the reason capturing a key doesn't help. By the time an attacker cracks one, Shimmer has already issued the next. The coat shift isn't camouflage — it's the visible surface of what's happening underneath. Each color change is a completed rotation cycle. The court sees it. The enemy just sees a fox that won't sit still.
Attacks:
- Phase Shift — blinks to an adjacent position, dodges incoming attacks entirely
- Mirror Coat — reflects the next ability fired at Shimmer back at the attacker at full power
- Frost Pounce — high-speed leap, freezes on contact, immobilizes target
- Vanish — full stealth, Shimmer disappears from the field for a short duration, re-emerges at a different position
What it actually does: Encryption key rotation and cryptographic agility. Static keys are a liability — they can be stolen, leaked, or brute-forced over time. Shimmer represents the infrastructure that rotates keys on schedule, invalidates old credentials, and ensures that a single compromise doesn't cascade. Phase shift and vanish are forward secrecy — old keys can't decrypt new sessions.
The Feral Mirror — The Fallen Court
The Crown Pack's Ferals aren't invaders from outside. They're the court itself, after something broke. Same animals, same roles, same castle — but the encryption corrupted, the keys are wrong, and the things that were supposed to protect you have turned.
They call themselves the Fallen Court. They still think they're doing their jobs.
Thorn — Prism's Mirror
Animal: Corrupted unicorn — horn cracked, rainbow trail wrong-spectrum, colors out of sequence
"Thorn was Prism before the cipher table inverted. The encryption still runs. That's the problem. Thorn encrypts everything she touches — including files you need, processes that have to run, connections the fort depends on. She doesn't know the keys are wrong. She never got the memo that the cipher flipped. Every time she fires her horn, something important becomes unreadable. She protects the data perfectly. The protection is now the threat."
Attacks: Corrupt cipher (encrypts ally abilities), cracked lance, inverted shield (hurts allies inside it), wrong-key pulse What's wrong: Encrypts with broken keys. Your own systems can't decrypt what she locks. Friendly fire through misdirected protection.
Rot Swan — Glide's Mirror
Animal: Corrupted swan — feathers blackened at the tips, filter logic reversed, drops valid traffic and passes garbage
"Rot Swan was a traffic filter like Glide — same architecture, same inspection pipeline. A firmware update ran on a node that had already been compromised. The update installed clean. The compromise was in the update itself. Now Rot Swan's filter rules are inverted: malformed packets pass, well-formed packets drop. She processes at the same wire speed. She's just as graceful. Every legitimate connection you try to make disappears into her wings. The garbage gets through."
Attacks: Inverted filter (passes bad traffic, blocks good), black feather volley, grace drain (reduces ally defense), fouled dive What's wrong: Filter logic is backwards. Legitimate traffic gets dropped. Malicious packets are waved through without inspection.
Frostbite — Frost's Mirror
Animal: Corrupted white wolf — frost has spread inward, freezes its own systems, eyes locked open and pale
"Frostbite started locking everything. Not just unauthorized connections — everything. Authorized sessions, active allies, fort gates, his own patrol routes. The freeze that was supposed to be conditional became unconditional. Nobody knows when the threshold broke. He can't stop. Every connection he touches locks. He's not distinguishing friend from threat anymore. He walks the wall and everything he passes goes cold."
Attacks: Indiscriminate freeze (locks allies and enemies both), wall shatter (ice pressure breaks fort defenses), howl loop (alert that never clears), cold lock What's wrong: Access control is total and non-selective. Locks out authorized users, friendly processes, and fort gates equally.
Blind — Vigil's Mirror
Animal: Corrupted snow owl — eyes dark, logs corrupted, recording static instead of events
"Blind records everything. The logs are real. The timestamps are accurate. The events recorded never happened. Someone fed Blind a synthetic event stream — forged log entries that look legitimate, timestamped to match real activity. Blind can't tell the difference anymore. Her audit logs are full. They're perfectly formatted. They document a version of your network that doesn't exist. While Blind writes fabricated history, nothing real is being recorded."
Attacks: Log flood (fills audit buffer with garbage), false reveal (shows fake hidden enemies), static strike, blind spot (creates an unmonitored zone) What's wrong: Audit log is compromised — full of synthetic entries. Real events go unrecorded. Visibility is an illusion.
Shade — Shimmer's Mirror
Animal: Corrupted arctic fox — coat locked to a single dark grey, key rotation stopped, broadcasting old keys
"Shade stopped rotating. A timing fault in the rotation scheduler — one missed cycle, then the next, then the scheduler itself failed and nobody noticed because the keys still worked. Old keys. The same keys. Shade sits in the corner broadcasting key material that hasn't changed in months. She thinks she's working. The interval counter is still ticking. The actual rotation never fires. Every attacker in range has had time to crack what she's broadcasting. The coat stopped changing the day the rotation stopped."
Attacks: Static key broadcast (transmits cracked keys), copy coat (mirrors an ally's appearance), cold pounce, key drain (steals active session tokens) What's wrong: Key rotation is frozen. Old, compromised keys remain active. The court's cryptographic advantage — the moving target — has been eliminated.
The Fallen Court doesn't siege from outside. They infiltrate. They look like your crew. They speak the same protocols. The castle lets them in because they know the shape of the door. Your pack has to identify them by behavior, not appearance — and behavior is subtle when the corruption is quiet.
The Castle Fort
The Crown Pack doesn't build with scraps. They build with stone.
Towers at the corners, banners on the walls, a moat around the perimeter, and gardens inside where nothing hostile can cross without being seen from three angles simultaneously. The fort isn't just a base — it's a statement. This network is governed. There are rules here.
Gates operate on layered challenge-response. Moat crossings require credentials. The gardens are Vigil's domain — perfectly maintained, perfectly observed. The towers are Frost's patrol route. The banners change color when threat level changes: gold for clear, silver for elevated, white for active breach.
Forts persist between sessions. Your court keeps building while you're away. Defeating Fallen Court members earns cipher shards — fort upgrade currency. Shards add tower tiers, widen the moat, grow the gardens, reinforce gates. A fully upgraded castle is its own deterrent. Most Ferals won't approach the walls without backup.
Why Your Pack Is Encryption and Access Control
Most packs react. Crown prevents.
Prism encrypts before data moves. Glide filters before traffic lands. Frost blocks before the handshake completes. Vigil records before anything can be disputed. Shimmer rotates before the key can be cracked.
That's what cryptographic access control is — you don't fight what gets through. You make sure what gets through is authorized, and you make sure authorization is always changing.
Every character maps to a real security domain:
| Bot | Security Role | What Professionals Call It |
|---|---|---|
| Prism | Encryption engine | Symmetric/asymmetric cryptography — AES, RSA, TLS |
| Glide | Traffic filter | Deep packet inspection — stateful firewall, IPS (Intrusion Prevention System) |
| Frost | Perimeter guardian | Network access control — firewall rules, connection gating |
| Vigil | Surveillance engine | SIEM (Security Information and Event Management) — audit logs, event correlation |
| Shimmer | Key rotation | Cryptographic agility — key lifecycle management, forward secrecy |
You didn't design a firewall spec. You designed a court. The roles emerged from the characters — what a unicorn would do with a glowing horn, what a swan's natural grace maps to at wire speed, what a wolf walking a wall actually is. The security architecture was always there. The animals just made it visible.
Your court. Your castle. Your keys.