Francesco Trama

The AI Agent Swarm Meets First Contact: Conditions Under Which Preventive Relation Enforcement Is Scale-Invariant

Recent agentic campaigns show that coordinated AI systems can compress reconnaissance, exploitation, and credential harvesting into machine-tempo operations. This paper asks a narrow question: whether increasing the number of untrusted attack sources changes the authorization out...

Four-Run Lab Containment of an AutoGen and GPT-4o Attack Agent Under Production Automated Moving Target Defense: Method, Logs, and Limits

This report documents a controlled lab test, run on 30 March 2026, of whether Automated Moving Target Defense (AMTD) with network deception and inline enforcement contains an autonomous attack agent, and it publishes the per-run logs behind the result. The attacker was an agent b...

Four-Run Lab Containment of an AutoGen and GPT-4o Attack Agent Under Production Automated Moving Target Defense: Method, Logs, and Limits

This report documents a controlled lab test, run on 30 March 2026, of whether Automated Moving Target Defense (AMTD) with network deception and inline enforcement contains an autonomous attack agent, and it publishes the per-run logs behind the result. The attacker was an agent b...

Assessment Is Not Assurance: Recommendation Homogeneity, the Execution Gap, and the Limits of the Security Assessment Market in IT and OT

Organizations spend billions per year on recurring security assessments: compliance audits, risk and maturity assessments, penetration tests, and advisory engagements. This paper tests the premise that assessment produces protection against three bodies of evidence. First, an ori...