ACSE-PME is a polymorphic cryptographic surface engine that continuously changes the observable surface of protected systems, so an attacker's reconnaissance goes out of date. It is one hardening layer — designed to run alongside patching, MFA/IAM, EDR and segmentation, not to replace them.
"The attacker's map goes out of date." — The Kali Invariant
Every component of ACSE-PME is designed for air-gapped, zero-trust, and enterprise production environments. Built in Rust. No runtime dependencies. No cloud requirement.
Continuously mutates cryptographic surface parameters — ports, certificates, cipher suites, TLS fingerprints — on a schedule derived from the Kali Invariant. The attacker's reconnaissance expires before they can act on it.
Protocol formally analysed with ProVerif. The peer handshake keeps its channel secret and authenticates both peers. Every accepted Defensive Leap is proven to come from the node it names. Replay protection is shown by tests. Governs all inter-node mutation coordination through the Control Plane relay.
Multi-tenant PostgreSQL backend; every authenticated API route checks organisation ownership. mTLS production transport. PKCS#11 HSM adapter (hardware validation pending). Per-node cycle telemetry (anomaly detection planned). SIEM dispatch. Licensing enforcement.
Ten bio-inspired domain profiles plus the TorpedoRay transport profile, composed by KaliCoreTarget (Profile 0xFF) — the meta-profile that oversees and coordinates all active defensive surfaces across the protected estate.
Lightweight Rust agent deployed to protected nodes. Self-registers against the Control Plane, enforces mutation schedules locally, and pushes telemetry to the Control Plane every 30 seconds.
Every mutation event, privileged operation, and policy change written to an immutable SHA3-256 audit chain. Evidentiary-grade for regulatory compliance, forensic investigation, and incident response.
"For a surface S an adversary observes at time T, the next cycle presents a different observable fingerprint. No observed state repeats within the verifier's window, and each state is drawn from fresh entropy — judged from outside by an independent verifier, not from what the node reports."ACSE Core Principle · Formalized in Patent IN202641070690
The Kali Invariant is not a feature. It is the foundational property that every layer of ACSE-PME is engineered to uphold on the surfaces it covers.
ACSE-PME is designed for air-gapped deployments, government security requirements, and enterprise production environments.