Escalate resistant hypotheses to a bypass specialist

[maajix]

Parent

#5

What to build

Route a hypothesis that meets a stable defensive control from standard validation into an applicable bounded bypass-specialist profile before the hypothesis can be exhausted.

Acceptance criteria

• A stable defensive signal creates a durable bypass assignment linked to the original work.
• Bypass assignments identify the observed control, attempted standard techniques, controls, environment facts, and safety requirements.
• Profiles cover edge or WAF normalization, parser or content-type differentials, authentication or authorization routing, and rate-limit or workflow-state bypass.
• Only applicable and authorized profiles are scheduled.
• The original hypothesis cannot become exhausted while required specialist work remains.
• Negative evidence is recorded per transformation class and the terminal wording is “not bypassed under the tested matrix.”
• All target-touching specialist behavior retains existing scope, headers, rate, budget, evidence, and rules-of-engagement enforcement.

Blocked by

• Introduce the campaign coordinator compatibility seam #6 — Introduce the campaign coordinator compatibility seam

[maajix]

Implemented in d1cb0d6 on branch agent/autonomous-campaign-coordinator. Full Python (159) + shell regression suites green.