cotton RGB CONTROL ROOM
ILLUSTRATIVE SIMULATION

Three agents. One verified outcome.

See the attack. Follow the evidence.
Watch the fix earn its closure.

MISSION 024 / LEAST PRIVILEGE

Exposed app. Overprivileged identity.

AUTHORIZED LABSYNTHETIC CANARY ONLY
ONE FINDING · ONE BOUNDED CHANGE
SCOPING THE TEST
R
RED AGENT
Test the attack path
STANDBY
B
BLUE AGENT
Explain the evidence
STANDBY
G
GREEN AGENT
Propose the repair
STANDBY
01 / SCOPE

Permission comes first.

An authorized lab, a bounded test, and a harmless canary. Nothing outside the approved scope is touched.

RULES OF ENGAGEMENTLab only · Canary only
00:00 / 01:12
Open full simulation

01 / SCOPE

scope lab-024
target synthetic canary
off-range blocked
data no customer data

02 / PROPOSED DIFF

− role: lab-storage:*
+ role: app-data:read
target app-workload
rollback staged before apply

03 / AUTHORITY

intent change-024-v1
approval exact diff + target
executor separate identity
approval mode simulated automatically

04 / VERIFICATION

red retest original path
separate verifier canary denial
health check app read succeeds
closure only to tested scope