Deterministic security reasoning core: hash-chained evidence ledger, attack-path rule engine, fail-closed policy gate. LLMs produce evidence and explain decisions; they never cross the decision boundary.
Assumed-breach Azure/Entra attack-path analyzer. Read-only collectors build a typed identity graph, deterministic detectors find privilege-escalation paths, and an LLM explains and prioritizes them in plain English.
