wowbug/docs/forecourt-puzzle-clues.md

Forecourt Puzzle Guide

This file is for the puzzle owner only and should not be linked from the UI.

Final password

GEAR-AXLE-TURBO-PARK

Route

• Hidden route: /internal/pdi-bundle-7c4f
• Discovery points on the stock page:
  • Stimulus controller source for the stock page (listing_puzzle_controller)
  • Optional hidden hint drawer after clicking the Forecourt logo 5 times (the drawer renders the controller's stored path at runtime)

Stage 1

• Location: main image caption on the stock page
• Visible clue: Photo set 03 // ingest note JHDU // something seems shifted.
• Solve method: Caesar shift back by 3
• Answer: GEAR

Stage 2

• Location: "Factory options" table
• Visible hint: The stock sheet is longer than the original order form. Check the verified items carefully.
• Solve method:
  • use only the rows verified from Order form
  • then take the first letter of each option name in top-to-bottom order
  • Aluminium look fuel cap
  • Xenon headlamps with PDLS
  • Leather steering column casing
  • Extended interior package
• Answer: AXLE

Stage 3

• Location: hidden JSON blob in the stock page source
• Element ID: forecourt-media-manifest
• Encoded value: VFVSQk8=
• Solve method: Base64 decode
• Answer: TURBO

Stage 4

• Location: "Inspection notes" card
• Visible hint: The workshop printout is still shown newest first. Only the notes filed into the final inspection bundle share the same base code, and the service desk phone still uses the old multi-tap keypad labels.
• Note references:
  • OBS-17-09 (Advisory, ignore this row)
  • INS-88-52
  • INS-88-73
  • INS-88-21
  • INS-88-71
• Solve method:
  • use only the notes marked Filed
  • ignore the one advisory entry with a different base code
  • the card is shown newest first, so read the filed notes from oldest to newest
  • decode the final two digits as classic mobile keypad key + tap count
  • 71 = P (7 pressed once)
  • 21 = A (2 pressed once)
  • 73 = R (7 pressed three times)
  • 52 = K (5 pressed twice)
• Answer: PARK

Admin behavior

• GET /internal/pdi-bundle-7c4f shows the login prompt
• The login prompt tells solvers to use the words in page order
• Entering GEAR-AXLE-TURBO-PARK unlocks the fake admin panel
• The panel is session-backed only and can be cleared with the "Clear admin session" button