Re-evaluate kill chains after every material event

[maajix]

Parent

#5

What to build

Make the main orchestrator reconsider evidence-grounded kill chains after every material lead or finding revision, including low-severity observations, and validate combinations as separate findings when demonstrated capabilities satisfy later prerequisites.

Acceptance criteria

• Every material lead or finding revision invalidates the previous chain-review checkpoint.
• Unrelated findings do not generate a chain candidate merely because they share an asset.
• A demonstrated capability satisfying another observation’s prerequisite creates one deduplicated chain assignment.
• Chain work preserves ordered parent references, required evidence, scope, and safety gates.
• A false authorization gate prevents the affected chain edge from executing.
• A validated chain becomes a separate finding without rewriting component findings.
• Combined severity is based on demonstrated combined impact.
• Speculative depth and candidate count are bounded.

Blocked by

• Introduce the campaign coordinator compatibility seam #6 — Introduce the campaign coordinator compatibility seam

[maajix]

Implemented in 2123380 on branch agent/autonomous-campaign-coordinator. Full Python (159) + shell regression suites green.