Cyber

Asymmetric POMDP on a simulated network.

Red starts with no visibility: discover, exploit, escalate, exfil, or hit a PLC. Success needs the right CVE / token / routing, not a dice roll.

Blue sees SIEM, not the true compromise map. Isolate, ACL, restore, decoys (169.254.x.x). Quiet Red may never show up in logs.

Kinetic — OverloadPLC can set kinetic_destruction (Blue fail-state).