An assessor expands a short municipal base wordlist with rules and masks that append years, seasons, and civic abbreviations. What problem class does that technique address?

Rule and mask engines systematically transform base tokens into probable password variants (digits, seasons, prefixes/suffixes) so assessors need not hand-author every candidate. They do not convert PSK to open auth, substitute for captures via lockouts, or extract passphrases from beacons. Used with authorization, they improve dictionary coverage against patterned human secrets.