# Team Composition

Each team should consist of 4–5 students. Every student is assigned a role that comes with unique responsibilities:

| Role                       | Description                                                                                                                                   |
| -------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
| **Analyst**                | Works inside the KC7 platform to conduct technical analysis. Solves puzzles and queries logs to identify malicious activity.                  |
| **Investigator**           | Explores the physical artifacts placed around the room. Builds the theory of who did it and why. Also speaks with the Investigative Database. |
| **Case Manager**           | Maintains the team’s casebook. Coordinates submissions to the Investigative Committee. Leads the final attribution decision.                  |
| *(Optional)* **Presenter** | (If used) Helps the team organize and deliver findings during a wrap-up, if the game concludes with student presentations.                    |

Roles are enforced by game rules: students must operate **within the boundaries of their assigned roles**, reinforcing teamwork and accountability. Players cannot switch roles mid-game unless facilitators explicitly allow it (e.g., to address absences).