← Research WP-04 Security Architects · Infrastructure Teams

The Ten Bio-Inspired Domain Profiles, Plus TorpedoRay and KaliCoreTarget — Domain-Adaptive Cryptographic Defence

Complete reference for all twelve ACSE mutation profiles — ten bio-inspired, plus TorpedoRay and KaliCoreTarget: domain, design insight, benchmarks, crown jewel claims, and integration patterns

Abstract

ACSE's ten bio-inspired domain profiles are ten expressions of a single MutationEngineCore, each tuned to a specific surface class. This paper describes each profile's domain, design insight, performance benchmark, crown jewel security claim, and integration pattern. All profiles enforce the Kali Invariant. The shipped agent composes all ten domain profiles plus TorpedoRay (the KaliCoreTarget composite); swapping one profile for another is a single registration call. Apart from the surfaces listed on Scope, the profile behaviours act on an in-memory model. The remaining 7 are implemented and tested, at earlier stages of integration — see each profile's Availability note below. Alongside these ten domain profiles is TorpedoRay (Profile 0x0B) — a 12th, distinct-category profile that mutates the transport channel itself rather than a business domain. It is also composed in the shipped agent. See §2.5 below and WP-08 for the full architecture.

Patent Notice

All 12 profiles — the ten bio-inspired domain profiles, TorpedoRay, and KaliCoreTarget — are covered by Indian patent application published · IN202641070690 · 19/06/2026.

1. Profile Architecture

Every profile implements the MutationTarget trait: five methods that give MutationEngineCore everything it needs to manage any surface: fingerprint() → current state, mutate(entropy) → apply mutation, validate(result) → check invariant, rollback(checkpoint) → restore state, profile_id() → ASMP identifier.

Infrastructure ClassProfileID
Intrusion response / active attackerMantisNet0x01
Cloud workloads / elastic scalingJellyNet0x02
Financial services / paymentsSquidShield0x03
Cloud cooperative enclavesChameleonNet0x04
AD / credential surfaces / defenceKrakenNet0x05
VPN / API deceptionAnglerShield0x06
Data vault / databaseNautilusVault0x07
Healthcare / HIPAAGlassFrog0x08
COLO / data centre / side-channelElectricEelGrid0x09
Nation-scale / 16-node distributedLeviathanGrid0x0A
Estate-wide orchestrationKaliCoreTarget0xFF

The 11 rows above are the domain-specific profiles this paper is named for. TorpedoRay (0x0B) is a 12th, distinct-category profile — it operates on the transport channel underneath all ten domains rather than being a domain of its own — and is covered separately in §2.5.

2. Profile Reference

🦐 Profile 0x01: MantisNet — Intrusion Response

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
4.55µs173k/s0x01

Key Mechanism: Five-state machine: Patrol→Strike→Retreat→Harden→Recover (62.1µs full cycle). Fastest profile.

Crown Jewel Claim:

Probe-triggered mutation design: every attacker probe is intended to trigger mutation, staling the attacker's observation.

Integration:

engine.register(Box::new(MantisNetTarget::new("perimeter")), "ids");

🪼 Profile 0x02: JellyNet — Elastic Infrastructure

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
5.02µs248k/s0x02

Key Mechanism: MVS (Minimum Viable Surface) floor at all load levels. Load-sweep (5 levels): 33.1µs.

Crown Jewel Claim:

Enforces a minimum surface floor (MVS) the engine does not mutate below, checked across all five load levels of the load-sweep.

Integration:

engine.register(Box::new(JellyNetTarget::new("api-gateway")), "cloud");

🦑 Profile 0x03: SquidShield — Finance / Payments

Implemented & tested; built per-transaction, so it requires a different integration model before it can be registered against the agent's per-node model.

Compute per cycleThroughputProfile ID
6.59µs165k/s0x03

Key Mechanism: Per-transaction surface rotation with atomic snapshot+restore for audit. PCI-DSS audit trail maintained throughout.

Crown Jewel Claim:

100% fingerprint uniqueness at 165k transactions/second. Zero collisions in 1,000 consecutive cycles.

Integration:

engine.register(Box::new(SquidShieldTarget::new("payment-api")), "fin");

🦎 Profile 0x04: ChameleonNet — Cloud Cooperative Enclaves

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
9.61µs100k/s0x04

Key Mechanism: Dual-channel: ally channel rotates on schedule known to authenticated peers; attacker channel has zero mutual information with ally channel.

Crown Jewel Claim:

Cryptographically proven zero mutual information between attacker and ally channels.

Integration:

engine.register(Box::new(ChameleonNetTarget::new("enclave-mesh")), "coop");

🐙 Profile 0x05: KrakenNet — Defence / AD Surfaces

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
14.84µs66.2k/s0x05

Key Mechanism: 4-arm independent mutation: network topology, credential identifiers, AD fingerprints, session tokens. Sever-and-regenerate: 1.13 ms.

Crown Jewel Claim:

LSASS dump captured at time t is cryptographically stale at t+1 — defeats credential harvesting as used in Change Healthcare and Stryker-Handala.

Integration:

engine.register(Box::new(KrakenNetTarget::new("ad-surface")), "defence");

🎣 Profile 0x06: AnglerShield — API Security / Deception

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
11.81µs68.4k/s0x06

Key Mechanism: Real endpoint hidden behind rotating fingerprint. Four deception lures. Attacker captured at 3-probe threshold → KaliCore Hunter escalation.

Crown Jewel Claim:

Turns active reconnaissance into attacker liability: every probe advances identification and stales the model.

Integration:

engine.register(Box::new(AnglerShieldTarget::new("public-api")), "api");

🐚 Profile 0x07: NautilusVault — Data Vault / Database

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
16.40µs84.4k/s0x07

Key Mechanism: 5× Fibonacci protection gradient: outer layers (metadata) highest rotation rate, inner layers (sensitive PII/PHI) highest cryptographic strength. Siphuncle O(1) integrity: 3.64µs.

Crown Jewel Claim:

O(1) vault integrity verification in 3.64µs — independent of vault size. A vault of 100M records verifies as fast as a vault of 100.

Integration:

engine.register(Box::new(NautilusVaultTarget::new("phi-store")), "vault");

🐸 Profile 0x08: GlassFrog — Healthcare / HIPAA

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
26.18µs6,080/s*0x08

*Low throughput by design — each cycle appends a cryptographic HIPAA/GDPR compliance proof.

Key Mechanism: Dual-state: observable surface mutates (Kali Invariant); audit chain is cryptographically immutable. Each cycle appends a HIPAA/GDPR compliance proof.

Crown Jewel Claim:

The only profile providing HIPAA/GDPR audit compliance as a cryptographic proof, machine-verifiable by any regulator.

Integration:

engine.register(Box::new(GlassFrogTarget::new("phi-api")), "hipaa");

⚡ Profile 0x09: ElectricEelGrid — COLO / Data Centre

Implemented; deliberately not yet activated, pending a future anomaly-detection subsystem this project has not yet built.

Compute per cycleThroughputProfile ID
5.58µs†179k/s†0x09

†Sachs steady-state. Hunter and Main Organ modes increase mutation rate.

Key Mechanism: Computational workload randomisation alongside surface mutation: power/thermal side-channel signals are randomised. Power proof: 0.70µs.

Crown Jewel Claim:

Designed to target the power side-channel in COLO environments; not yet activated pending a future anomaly-detection subsystem, and independent hardware-based side-channel validation is future work.

Integration:

engine.register(Box::new(ElectricEelGridTarget::new("dc-node")), "colo");

🐉 Profile 0x0A: LeviathanGrid — Nation-Scale / 16-Node

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
45.77µs16.6k/s0x0A

Key Mechanism: 45.77µs is the per-node compute cycle. Coordinating full topology rewire across the 16-node mesh is an estate-wide Defensive Leap operation, measured end-to-end at median 1.9s / p99 3.8s. Grand hash (SHA3-256 of all 16 fingerprints): 14.6µs O(1) per node.

Crown Jewel Claim:

16-node coordinated mutation via a cryptographically signed, relayed Defensive Leap — measured median 1.9s / p99 3.8s with up to 50 agents on one host (13 October 2026). Defeats the 14-month SolarWinds topology mapping.

Integration:

engine.register(Box::new(LeviathanGridTarget::new("nation-grid")), "scale");

🔱 Profile 0xFF: KaliCoreTarget — Meta-Profile / All

Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.

Compute per cycleThroughputProfile ID
1.9s median / 3.8s p99 estateAll profiles0xFF

Key Mechanism: One trigger fans out to all registered profiles via a cryptographically signed, relayed Defensive Leap; measured end-to-end with up to 50 agents on one host (13 October 2026) at median 1.9s / p99 3.8s.

Crown Jewel Claim:

A single KaliCoreTarget trigger coordinates rotation of every surface in the estate, measured median 1.9s / p99 3.8s end-to-end. Leap origin authentication proven in ProVerif.

Integration:

engine.register(Box::new(KaliCoreTarget::new()), "all");

🔌 Profile 0x0B: TorpedoRay — Transport Channel (Not a Domain Profile)

Composed in the shipped agent, standalone and as a KaliCore sub-target.

Compute per cycleThroughputProfile ID
Not yet benchmarkedNot yet benchmarked0x0B

Unlike the 11 profiles above, TorpedoRay is not tied to a business domain — it protects the transport channel every one of those profiles' traffic travels over. See WP-08 for the full architecture, threat model, and patent claims.

Key Mechanism: Rotates six transport-layer properties every mutation cycle — cipher suite pattern, TLS extension ordering, handshake timing, packet size distribution seed, timing jitter seed, and the in-transit session token — into a combined SHA3-256 channel fingerprint. At EWMA anomaly score ≥ 0.70 ("Torpedo" mode), all six rotate simultaneously in a single cycle instead of the standard per-cycle rate.

Crown Jewel Claim:

Defeats JA3/JA3S fingerprinting and per-packet session correlation: an observer cannot tell whether packet N and packet N+1 belong to the same session, independently of and complementary to TLS 1.3 (which protects content, not the fingerprint). 25 dedicated unit tests plus 2 engine integration tests.

Integration:

engine.register(Box::new(TorpedoRayTarget::new("edge-node", TransportMode::Asmp)), "transport");

3. TEE Compatibility and Profile Combinations

All 12 profiles — the ten bio-inspired domain profiles, TorpedoRay, and KaliCoreTarget — are compatible with all 6 TEE/TPM adapters (only TPM is hardware-verified today; see WP-00 §6.2). Profiles are designed for simultaneous deployment — e.g., SquidShield (payments) + GlassFrog (PHI) + AnglerShield (API) + KrakenNet (AD) + KaliCoreTarget (estate coordination). Each profile operates independently; KaliCoreTarget triggers a coordinated estate-wide rotation across all of them, measured median 1.9s / p99 3.8s via a signed Defensive Leap.

Entropy Independence

When multiple profiles are registered, each receives a statistically independent entropy slice: SHA3-256(entropy_bundle || profile_id || target_id || cycle_seq). No profile's mutation inputs can be inferred from another's.

Read the full formatted version:

← All Papers