simulate

Documentation

Overview

Package simulate generates synthetic incident scenarios — adversary emulation for AI agents. Output is a fake profile root that the normal collector can acquire, so the full pipeline (collect → verify → normalize → triage) is exercised end to end.

All content is synthetic. Never feed real evidence through this package.

Index

• Variables
• func OrphanAgent(profileRoot string) error

Variables

var Scenarios = []string{"orphan-agent"}

Scenarios lists available scenario IDs.

Functions

func OrphanAgent

func OrphanAgent(profileRoot string) error

OrphanAgent writes the MVP acceptance scenario (plan §30):

Session S1: a legitimate session spawns Agent A via the Task tool;
Agent A completes. Later, Agent B appears (session S2) with NO
corresponding spawn event, messages/resumes Agent A to obtain its
results, and claims (narrative only) to have executed a command.