The early rules teach the interface
The first rules look like a normal sign-up form: length, number, uppercase letter, special character, weekday, and date. They are not meant to be hard on their own. They teach the core interaction: the password is checked live and every visible rule must remain valid.
This foundation matters because the later rules do not replace the early ones. They stack on top. A winning password must still satisfy the basic requirements after all 22 rules are visible.
The middle rules create overlapping systems
The middle of the game introduces month names, moon phase symbols, weak password filtering, digit sums, Roman numerals, the current year, periodic table symbols, binary strings, and country names. This is where the puzzle stops feeling linear.
Many of these rules overlap. A country name may contain vowels that must be uppercase. A month may contain Roman numeral letters. A binary string may disturb the digit sum. This overlap is the reason the game feels surprising even when you understand each individual instruction.
The late rules are optimization problems
The final requirements ask you to optimize the complete password. Prime length, perfect squares, NATO words, atomic numbers, and ASCII divisibility are less about knowing facts and more about tuning the string without damaging older work.
At this stage, careful editing matters more than speed. Make one change, verify the full rule list, then continue. Large rewrites can create several invisible problems at once.