Alright, I need to figure out some rules stuff for Hosts. So, Patrol IC should be rolling around, doing Matrix Perception tests, and making sure that everything is on the up and up. I get that Patrol IC should be looking at individual users to make sure they're not hotshot deckers like Red-eye. So, if Red-eye was running silent, and they got a look at him, then they'd probably go ahead and all in something bigger. Similarly, if they happened to be using Matrix Perception on Red-eye right after he used Hack on the Fly and checked for last matrix action, that would alert them as well. On the flipside, if they did same thing, but after Red-eye used Edit File, then nothing would turn up amiss because that's not an illegal action. Am I right so far?
So, I guess my main question is one of application. We're dealing with a rating 7 host, meaning it can have 7 IC icons running at any given time. Say they've got 4 Patrol IC running 24/7, and there's currently 87 users on the A&M grid. Say they average 3 passes per CT, that means each user would be subject to Matrix Perception every 7 turns or so, unless something fishy piqued their interest. Now, I guess I could roll 1d7 and have that number be the turn in which Red-eye was the subject of Matrix Perception, and then roll 1d3 to see on which pass of that turn Red-eye was MPed, but how do you guys do it? I gotta say the temptation to either hand-wave or be punitive is pretty high, and probably what I would end up doing in an around-the-table sort of game.
ETA: In my above example, IC wouldn't be checking for any silently running icons, so if 1 Patrol IC was spending 1 pass each CT just doing that, that would be checking each user every 8 CTs.