Scope¶

A gym for training cyber-defense agents. Grow packs, metrics, and wrappers — not host-type count and not a bundled MAPPO.

In this repo	Bring your own
Network, SIEM, Red/Blue actions	MAPPO / QMIX / GNN trainers
Belief graphs from logs	Privileged Blue graphs at train time
YAML packs	Weekly ATT&CK dumps
Heuristic / kill-chain baselines	Production SOC connectors