Abstract
ACSE's ten bio-inspired domain profiles are ten expressions of a single MutationEngineCore, each tuned to a specific surface class. This paper describes each profile's domain, design insight, performance benchmark, crown jewel security claim, and integration pattern. All profiles enforce the Kali Invariant. The shipped agent composes all ten domain profiles plus TorpedoRay (the KaliCoreTarget composite); swapping one profile for another is a single registration call. Apart from the surfaces listed on Scope, the profile behaviours act on an in-memory model. The remaining 7 are implemented and tested, at earlier stages of integration — see each profile's Availability note below. Alongside these ten domain profiles is TorpedoRay (Profile 0x0B) — a 12th, distinct-category profile that mutates the transport channel itself rather than a business domain. It is also composed in the shipped agent. See §2.5 below and WP-08 for the full architecture.
All 12 profiles — the ten bio-inspired domain profiles, TorpedoRay, and KaliCoreTarget — are covered by Indian patent application published · IN202641070690 · 19/06/2026.
1. Profile Architecture
Every profile implements the MutationTarget trait: five methods that give MutationEngineCore everything it needs to manage any surface: fingerprint() → current state, mutate(entropy) → apply mutation, validate(result) → check invariant, rollback(checkpoint) → restore state, profile_id() → ASMP identifier.
| Infrastructure Class | Profile | ID |
|---|---|---|
| Intrusion response / active attacker | MantisNet | 0x01 |
| Cloud workloads / elastic scaling | JellyNet | 0x02 |
| Financial services / payments | SquidShield | 0x03 |
| Cloud cooperative enclaves | ChameleonNet | 0x04 |
| AD / credential surfaces / defence | KrakenNet | 0x05 |
| VPN / API deception | AnglerShield | 0x06 |
| Data vault / database | NautilusVault | 0x07 |
| Healthcare / HIPAA | GlassFrog | 0x08 |
| COLO / data centre / side-channel | ElectricEelGrid | 0x09 |
| Nation-scale / 16-node distributed | LeviathanGrid | 0x0A |
| Estate-wide orchestration | KaliCoreTarget | 0xFF |
The 11 rows above are the domain-specific profiles this paper is named for. TorpedoRay (0x0B) is a 12th, distinct-category profile — it operates on the transport channel underneath all ten domains rather than being a domain of its own — and is covered separately in §2.5.
2. Profile Reference
🦐 Profile 0x01: MantisNet — Intrusion Response
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 4.55µs | 173k/s | 0x01 |
Key Mechanism: Five-state machine: Patrol→Strike→Retreat→Harden→Recover (62.1µs full cycle). Fastest profile.
Crown Jewel Claim:
Probe-triggered mutation design: every attacker probe is intended to trigger mutation, staling the attacker's observation.
Integration:
engine.register(Box::new(MantisNetTarget::new("perimeter")), "ids");🪼 Profile 0x02: JellyNet — Elastic Infrastructure
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 5.02µs | 248k/s | 0x02 |
Key Mechanism: MVS (Minimum Viable Surface) floor at all load levels. Load-sweep (5 levels): 33.1µs.
Crown Jewel Claim:
Enforces a minimum surface floor (MVS) the engine does not mutate below, checked across all five load levels of the load-sweep.
Integration:
engine.register(Box::new(JellyNetTarget::new("api-gateway")), "cloud");🦑 Profile 0x03: SquidShield — Finance / Payments
Implemented & tested; built per-transaction, so it requires a different integration model before it can be registered against the agent's per-node model.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 6.59µs | 165k/s | 0x03 |
Key Mechanism: Per-transaction surface rotation with atomic snapshot+restore for audit. PCI-DSS audit trail maintained throughout.
Crown Jewel Claim:
100% fingerprint uniqueness at 165k transactions/second. Zero collisions in 1,000 consecutive cycles.
Integration:
engine.register(Box::new(SquidShieldTarget::new("payment-api")), "fin");🦎 Profile 0x04: ChameleonNet — Cloud Cooperative Enclaves
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 9.61µs | 100k/s | 0x04 |
Key Mechanism: Dual-channel: ally channel rotates on schedule known to authenticated peers; attacker channel has zero mutual information with ally channel.
Crown Jewel Claim:
Cryptographically proven zero mutual information between attacker and ally channels.
Integration:
engine.register(Box::new(ChameleonNetTarget::new("enclave-mesh")), "coop");🐙 Profile 0x05: KrakenNet — Defence / AD Surfaces
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 14.84µs | 66.2k/s | 0x05 |
Key Mechanism: 4-arm independent mutation: network topology, credential identifiers, AD fingerprints, session tokens. Sever-and-regenerate: 1.13 ms.
Crown Jewel Claim:
LSASS dump captured at time t is cryptographically stale at t+1 — defeats credential harvesting as used in Change Healthcare and Stryker-Handala.
Integration:
engine.register(Box::new(KrakenNetTarget::new("ad-surface")), "defence");🎣 Profile 0x06: AnglerShield — API Security / Deception
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 11.81µs | 68.4k/s | 0x06 |
Key Mechanism: Real endpoint hidden behind rotating fingerprint. Four deception lures. Attacker captured at 3-probe threshold → KaliCore Hunter escalation.
Crown Jewel Claim:
Turns active reconnaissance into attacker liability: every probe advances identification and stales the model.
Integration:
engine.register(Box::new(AnglerShieldTarget::new("public-api")), "api");🐚 Profile 0x07: NautilusVault — Data Vault / Database
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 16.40µs | 84.4k/s | 0x07 |
Key Mechanism: 5× Fibonacci protection gradient: outer layers (metadata) highest rotation rate, inner layers (sensitive PII/PHI) highest cryptographic strength. Siphuncle O(1) integrity: 3.64µs.
Crown Jewel Claim:
O(1) vault integrity verification in 3.64µs — independent of vault size. A vault of 100M records verifies as fast as a vault of 100.
Integration:
engine.register(Box::new(NautilusVaultTarget::new("phi-store")), "vault");🐸 Profile 0x08: GlassFrog — Healthcare / HIPAA
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 26.18µs | 6,080/s* | 0x08 |
*Low throughput by design — each cycle appends a cryptographic HIPAA/GDPR compliance proof.
Key Mechanism: Dual-state: observable surface mutates (Kali Invariant); audit chain is cryptographically immutable. Each cycle appends a HIPAA/GDPR compliance proof.
Crown Jewel Claim:
The only profile providing HIPAA/GDPR audit compliance as a cryptographic proof, machine-verifiable by any regulator.
Integration:
engine.register(Box::new(GlassFrogTarget::new("phi-api")), "hipaa");⚡ Profile 0x09: ElectricEelGrid — COLO / Data Centre
Implemented; deliberately not yet activated, pending a future anomaly-detection subsystem this project has not yet built.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 5.58µs† | 179k/s† | 0x09 |
†Sachs steady-state. Hunter and Main Organ modes increase mutation rate.
Key Mechanism: Computational workload randomisation alongside surface mutation: power/thermal side-channel signals are randomised. Power proof: 0.70µs.
Crown Jewel Claim:
Designed to target the power side-channel in COLO environments; not yet activated pending a future anomaly-detection subsystem, and independent hardware-based side-channel validation is future work.
Integration:
engine.register(Box::new(ElectricEelGridTarget::new("dc-node")), "colo");🐉 Profile 0x0A: LeviathanGrid — Nation-Scale / 16-Node
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 45.77µs | 16.6k/s | 0x0A |
Key Mechanism: 45.77µs is the per-node compute cycle. Coordinating full topology rewire across the 16-node mesh is an estate-wide Defensive Leap operation, measured end-to-end at median 1.9s / p99 3.8s. Grand hash (SHA3-256 of all 16 fingerprints): 14.6µs O(1) per node.
Crown Jewel Claim:
16-node coordinated mutation via a cryptographically signed, relayed Defensive Leap — measured median 1.9s / p99 3.8s with up to 50 agents on one host (13 October 2026). Defeats the 14-month SolarWinds topology mapping.
Integration:
engine.register(Box::new(LeviathanGridTarget::new("nation-grid")), "scale");🔱 Profile 0xFF: KaliCoreTarget — Meta-Profile / All
Composed in the shipped agent; behaviour acts on an in-memory model except the surfaces listed on Scope.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| 1.9s median / 3.8s p99 estate | All profiles | 0xFF |
Key Mechanism: One trigger fans out to all registered profiles via a cryptographically signed, relayed Defensive Leap; measured end-to-end with up to 50 agents on one host (13 October 2026) at median 1.9s / p99 3.8s.
Crown Jewel Claim:
A single KaliCoreTarget trigger coordinates rotation of every surface in the estate, measured median 1.9s / p99 3.8s end-to-end. Leap origin authentication proven in ProVerif.
Integration:
engine.register(Box::new(KaliCoreTarget::new()), "all");🔌 Profile 0x0B: TorpedoRay — Transport Channel (Not a Domain Profile)
Composed in the shipped agent, standalone and as a KaliCore sub-target.
| Compute per cycle | Throughput | Profile ID |
|---|---|---|
| Not yet benchmarked | Not yet benchmarked | 0x0B |
Unlike the 11 profiles above, TorpedoRay is not tied to a business domain — it protects the transport channel every one of those profiles' traffic travels over. See WP-08 for the full architecture, threat model, and patent claims.
Key Mechanism: Rotates six transport-layer properties every mutation cycle — cipher suite pattern, TLS extension ordering, handshake timing, packet size distribution seed, timing jitter seed, and the in-transit session token — into a combined SHA3-256 channel fingerprint. At EWMA anomaly score ≥ 0.70 ("Torpedo" mode), all six rotate simultaneously in a single cycle instead of the standard per-cycle rate.
Crown Jewel Claim:
Defeats JA3/JA3S fingerprinting and per-packet session correlation: an observer cannot tell whether packet N and packet N+1 belong to the same session, independently of and complementary to TLS 1.3 (which protects content, not the fingerprint). 25 dedicated unit tests plus 2 engine integration tests.
Integration:
engine.register(Box::new(TorpedoRayTarget::new("edge-node", TransportMode::Asmp)), "transport");3. TEE Compatibility and Profile Combinations
All 12 profiles — the ten bio-inspired domain profiles, TorpedoRay, and KaliCoreTarget — are compatible with all 6 TEE/TPM adapters (only TPM is hardware-verified today; see WP-00 §6.2). Profiles are designed for simultaneous deployment — e.g., SquidShield (payments) + GlassFrog (PHI) + AnglerShield (API) + KrakenNet (AD) + KaliCoreTarget (estate coordination). Each profile operates independently; KaliCoreTarget triggers a coordinated estate-wide rotation across all of them, measured median 1.9s / p99 3.8s via a signed Defensive Leap.
When multiple profiles are registered, each receives a statistically independent entropy slice: SHA3-256(entropy_bundle || profile_id || target_id || cycle_seq). No profile's mutation inputs can be inferred from another's.
Read the full formatted version:
← All Papers