Whitepapers, formal verification models, red-team results, and case studies. Every claim in these papers is backed by code, tests, and a published patent.
The comprehensive reference covering the full ACSE stack — architecture, all ten bio-inspired domain profiles plus TorpedoRay, ASMP/1.0 wire protocol, red-team results, performance benchmarks, and case studies. The definitive starting point for anyone evaluating ACSE.
How ACSE becomes operable: API-key + RBAC management, live estate monitoring, Auto-Discovery across 6 connectors, firewall and SIEM integration, policy engine, and a SHA3-256 tamper-evident audit chain with TPM-backed key custody — all behind a single REST API.
The theory paper. Formal foundations of the Kali Invariant, the four-layer ACSE model, KaliCore governing intelligence, the atomic mutation cycle, and security properties — without implementation code. The definitive architectural reference.
Deep implementation paper. All five core subsystems, 3-line integration API, entropy architecture, SHA3-256 audit chain, all six TEE/TPM adapters (Mock, TPM — live and hardware-verified — plus SGX, Nitro, SEV-SNP, and ARM CCA, built and unit-tested pending real-hardware validation), and the pme-console management interface.
Full protocol specification — all 5 message types in wire format, peer authentication that never transmits the shared secret, the Defensive Leap mechanism, node-granted protected actions (MSG-005), and ProVerif analysis results. RFC-candidate format.
All ten bio-inspired domain profiles in depth, plus TorpedoRay (0x0B, transport) and KaliCoreTarget (0xFF, the composite) — domain, design rationale, performance benchmarks, crown jewel claim, and integration guide for each. The complete reference for profile selection by infrastructure class.
White-box evaluation of the real engine with an optimal linker. Fingerprint linkability L=0.5230 (n = 9,000, 13 October 2026) against a claimed bound of ≤0.535, inside the ideal-random control's range. Unsourced live-exploit results withdrawn.
Six public incidents — Change Healthcare, SolarWinds, Stryker/Handala, Equifax, Colonial Pipeline and MOVEit — examined for where a stable mapped surface helped the attacker, and where surface rotation would and would not have changed the outcome. Illustrative analyses, not claims of prevention.
What was proved in ProVerif and what was not: secrecy and mutual authentication of the peer handshake, origin authentication of Defensive Leaps, and node-granted protected actions (MSG-005). Not a zero-knowledge proof. ASMP frames are authenticated, not encrypted. Group secrets rotate on a schedule, and a retired secret is deleted and no longer accepted. Deletion is not cryptographic erasure: copies can remain in database logs and in backups taken before the rotation. The group secret is delivered sealed to each node's long-term key, so a recorded delivery could be opened if that key were later compromised. This is not forward secrecy.
Profile 0x0B. Continuous cryptographic mutation of the observable transport channel fingerprint. Defeats JA3/JA3S fingerprinting, per-packet unlinkability, session token rotation at ASMP boundary, and the Torpedo mechanism — disruptive mid-session mutation without terminating the legitimate connection.
A coverage model across six waves — IT infrastructure (live today), then HCI and storage fabrics, cloud-native and containers, OT/ICS/SCADA, telecom and 5G, and national critical infrastructure (roadmap). Each surface is mapped to a profile and the patent claim it draws on; the waves beyond IT infrastructure are design targets, not shipped capabilities.
Patent application published · IN202641070690 · 19/06/2026
All concepts described in these papers are covered by patent IN202641070690 filed by Arul Raj with the Indian Patent Office. Expedited examination (Form 18A) and early publication (Form 9) requested. Papers are public technical disclosures published post-filing.
For collaboration, licensing, pilot deployment, or academic enquiries — reach out directly.