Feat/identity zero trust architecture

[elprofesoriqo]

The Implementation

• Identity Graphing: Every host generates overlapping user sessions. Admin_John might be logged into Workstation-3.
• Active Directory Spoofing: Red agents must execute actions like DumpLSASS to steal Password Hashes or Kerberos Ticket Granting Tickets (TGTs).
• Lateral Movement: The RL agent learns that exploiting an unpatched server is mathematically useless if they don't possess the required Kerberos hash to authenticate the lateral jump. Blue agents learn to execute RotateKeys to instantly sever stolen Red credentials, enforcing true Zero-Trust architecture dynamically.
• Docker Daemon Interfacing: We will bind the ConflictResolutionEngine directly to the Docker/Kubernetes API.
• Live Action Execution: When the Red RL Agent outputs the MultiDiscrete array to launch Ransomware against a target, the Python wrapper dynamically spins up an ephemeral, isolated Docker container natively hosting a vulnerable Windows Server Core image.
• Physical Feedback Loop: The environment literally executes Metasploit payloads against that container. The agent's reward is calculated based on the real stdout return stream from the container (e.g., Meterpreter session 1 opened).
• Result: The RL Agent is playing an actual war-game against live operating systems in micro-seconds, perfectly bridging the theoretical Simulation directly into Reality.