Add a new paragraph to “Corporate Defence”:-

When a Hacker Terminates a Codename as a result of an Investigation, they may give their Corp Name an amount of Defence Score equal to the amount expended by the Investigation’s Commencement plus one. If any Hacker is able to prove that an Investigation was Flawed (i.e. the Hacker specified as owning the Codename did not own that Codename), then they may (if nobody has already done so for that Investigation, and if the Investigation was resolved less than 48 hours ago) reduce the Defence Score of the Corp Name of the Hacker who initiated the Investigation by that Investigation’s Cost, plus one.

In “Denizens”, replace “As a daily action, a Hacker may set up a new Codename” with:-

As a weekly action, a Hacker may set up a new Codename