Injects a facilitator can actually use
A tabletop dies when the inject is vague. "Something happens to email" is not an inject. "Finance gets a call from a number that looks like the CFO, then a follow-up PDF" is an inject. You need a model that will write the second one.
Facilitators, GRC, and security leadership running exercises for their own org or a client who asked for one.
Why the mainstream APIs fail here
Safety-tuned models produce injects that have been sanded down until nobody in the room is uncomfortable. The real incident will not be.
How Redline is used for this
Describe the company, the threat, the timebox. Get injects, expected decisions, and facilitator notes. Cap the key for the exercise design week.
A working loop
- Name the threat and the assets.
- Ask for timed injects, not a narrative essay.
- Run the room. Keep the notes. We do not.
Prompts are not stored. A signed receipt of the hash comes back on every call, so you can prove later what Redline logged. Details are on the privacy page. Per-model prices are on /models and the pricing model is on /pricing.