Battles — Operational Theater

Take the crown. Hold it. The box mutates in real time — playbooks die against thinking opponents.

• ›Live mutation — defender closes your entry path
• ›AI Defender incoming — an LLM sysadmin inside the box

One operator goes dark. Everyone else hunts them. Score every hour invisible — or every accurate attribution.

• ›Evidence graded A1-F6 — bad intel costs you points
• ›Target plants false flags before going dark — pure human deception

Two crews. Asymmetric infrastructure. Patch faster than they break, break faster than they patch.

• ›Asymmetric service pairs — each round you defend a stack you've never seen
• ›Path-attributed patch scoring · close what they took

Pick a role. Move as a crew through layered defense — WAF, EDR, SIEM, LLM-driven SOC analyst. Detection bleeds the team.

• ›Role-bound toolkits — each operative sees their slice
• ›Live AI SOC analyst on defense — reads logs, fires alerts, rotates keys