01
Explicit authority
Bind every assessment to attributable permission, scope, and time limits.
07
NightFall Mimetic Red Team Fabric
An owner-controlled security-validation fabric for bounded, attributable testing of systems the operator is explicitly authorized to assess.
The premise
The Mimetic Red Team Fabric is designed to make security testing safer and more accountable through constrained authority, monitored execution, evidence continuity, emergency stop, and mandatory recovery.
What it is
The project focuses on proving who authorized an assessment, what scope was granted, what actions occurred, and whether the environment was returned to a safe state.
Testing behavior is intended to remain bounded by signed authority, short-lived execution permission, local control, and preserved evidence.
The current phase establishes a trusted execution and evidence foundation. It does not claim complete platform sandboxing or unrestricted real-world readiness.
Architecture
Public development priorities
02
Bounded execution
Constrain approved testing to monitored and revocable operating boundaries.
03
Proof continuity
Preserve signed evidence of authorization, execution, interruption, and recovery.
04
Emergency stop
Maintain owner-controlled interruption and mandatory safe recovery.
05
Local control
Keep assessment authority and evidence policy under the owner’s control.
06
Confidential methods
Operational testing methods and protected enforcement details are not public.
Evidence
Current state
What has been demonstrated.
Phase 1
Conditional result
The trusted-execution and evidence substrate completed its defined validation boundary.
74
Automated tests
The accepted Phase 1 validation reported 74 passing tests with no failures, errors, or skips.
15
Validated schemas
Defined evidence and control schemas passed their validation boundary.
7 modes
Owner proof control
All seven defined owner-controlled Proof Trail modes were exercised within the accepted scope.
Results describe preserved controlled tests and their defined scope. They do not convert unfinished long-term objectives into completed capabilities.
Boundaries
Authorization is non-negotiable
- The fabric is for systems the operator owns or is explicitly authorized to assess.
- Phase 1 remains conditional while stronger platform sandboxing, durable crash recovery, transport separation, and hardware-backed trust are developed.
- The project does not authorize autonomous expansion beyond signed scope.
- Emergency stop, evidence preservation, and recovery requirements may not be bypassed by ordinary testing workflows.
Original work
What NightFall contributes.
Red-team automation, signed authorization, sandboxing, and audit trails each have prior art. NightFall Technologies considers the fabric’s complete authority, execution, evidence, interruption, and recovery architecture proprietary.
Our approach to originalityCompany-wide governance
Every NightFall system remains subject to the same responsibility and local-control boundary.
Product-specific capability does not override owner authority, neutral operation, transparent updates, accountable use, or the prohibition on hidden vendor control.
Read the governing framework