CYBER RANGE › WORKBENCH › P3-AI COMMAND

P3-AI Command

FROM MATERIAL RISK TO VERIFIED OUTCOME

Which decision needs attention — and what does the evidence actually support?

DATA AS OF —

EVIDENCE COVERAGE —

INVENTORY COMPLETENESS PARTIAL · connectors NOT DEMONSTRATED

SCOPE bounded validation estate

CUSTOMER / ENVIRONMENT AEGIS Cyber Range · DEV

Material Risk Paths

—

Decisions Required

—

Verified Risk Reduction

NOT AVAILABLE

Proof Coverage

—

Data Confidence

CALC NOT VALIDATED

Selected material scenario

—

▸▸

① PREDICT TARGET DESIGN

Observed path—

Plausible pathHEURISTIC · NOT PROBABILITY

Business service—

Priorityrule-based, in scope

LikelihoodNOT AVAILABLE

Consequencecustomer-confirmed

Expected reductionMETHOD NOT VALIDATED

Forecast confidenceNOT AVAILABLE

② PREVENT CONCEPTUAL WORKFLOW

DECIDEoption+alts

▸

AUTHORIZEnamed owner

▸

CHANGEcustomer+rollback

▸

VERIFYbounded

Candidate customer action—

OwnerCustomer

ApprovalREQUIRED

Authoritative change systemcustomer ITSM

RollbackREQUIRED

Verification planbounded, post-change

✕ No Execute / Remediate / Apply to any production system — customer owns authorization, change and risk acceptance.

③ PROVE DEMONSTRATED · LAYER-A

REFUTED

neg control · 33 / F · KEV 0

VERIFIED

known-good · 100 / A+ · KEV 1

Gate rulea missed KEV forces REFUTED

Corpus7 sealed weaknesses (4 KEV)

SHA-2564a3cfa7c…f3914c8

Model inference in scoringnone (import-trace)

Receipt lifecycle (Layer-B)TARGET · NOT GENERATED

Verified reductionNOT AVAILABLE

DEMONSTRATION CLAIM SCORE — NOT AN ENTERPRISE SECURITY SCORE

Decision queue LIVE ≤5, ranked

Each bounded control claim, its independent verdict from the Range answer key, and the customer-owned next action.

#	Bounded control / claim	Verdict	Owner · next action

Proof boundary

Stated on the surface — what is proven, what is not.

Demonstrated: the deterministic gate returns REFUTED when a known-exploited weakness is missed and VERIFIED for a defined known-good input — reproducible, no model inference in the scoring path.

From the Range (laboratory data · synthetic): the bounded verdicts, evidence coverage, and validation-lab counts shown here — not customer telemetry.

Target / conceptual (not proven): PREDICT likelihood & forecast, PREVENT workflow, evidence receipts, expiry/reopen, verified reduction, live customer connectors, and every Security Investment number.

EXECUTIVE › PORTFOLIO › SECURITY INVESTMENT

Security Investment Command

EARN ITS PLACE

Which security investments are known, evidenced, and earning their place — and which need investigation?

CONCEPTUAL PRODUCT MODEL · SYNTHETIC DEMO DATA · ATTRIBUTION NOT VALIDATED. Rows are Security Investment Items, not network assets. Contribution is never "% of enterprise defense" — it is Allocated Direct / Shared / Redundancy / Unallocated-Unknown, and unallocated value is an honest result. Missing cost, dependency, regulatory need, inventory, or migration risk forces INVESTIGATE. AEGIS never auto-retires.

Investment portfolio

Real product UI concept populated with synthetic data; methodology and live customer wiring are not demonstrated.

Investment item	Evidence	Contribution	SOC profile	Decision

Portfolio run-rate cost UNKNOWN

Inventory completeness PARTIAL

Unmapped spend UNKNOWN

Measurement contract CONCEPTUAL / UNSOURCED

Installation is not evidence of value. Value requires a defined scope, denominator, counterfactual class, confidence, and an unallocated bucket.

DEPLOYEDpresent?

▸

USEDoperating?

▸

TESTEDevidence?

▸

CONTRIBUTEDscoped outcomes?

▸

DECIDEDkeep/improve/consolidate/investigate

REPORTS › GOVERNANCE › PROOF / EVIDENCE

Proof / Evidence

Every bounded validation claim, its reproduce step, and independent verdict — live from the Range.

ID	Category	Claim	Reproduce	Verdict

GOVERNANCE › VALIDATION ESTATE › CYBER RANGE

Cyber Range

The bounded validation estate AEGIS scores against — aegiscyberrange.com.

MSSP tenants LAB

tenants/index.json

VAPT-Lab validation customers LAB

tenants/vapt-lab/manifest.json

ABOUT › STATUS LANGUAGE

Method & Honesty

The status language governing every label on this dashboard.

Status language (spec Appendix B)

DEMONSTRATEDexecuted & preserved in the stated environment

OBSERVEDa runtime surface was seen; downstream unverified

DEFINEDmethod/contract specified; readiness not implied

CONCEPTUALtarget product / methodology design

SYNTHETICillustrative data; not customer telemetry

UNKNOWNdisplayed, never inferred — never zero or green

The connection & the boundary

Wired to the production Cyber Range, read-only. The browser calls a same-origin proxy /api/range/* that fetches app.aegiscyberrange.com server-side (the Range JSON is CORS-locked to the app origin). Read-only, path-allowlisted; never writes, never touches app.aegisnexuslogin.com.

Control boundary: AEGIS recommends and verifies — your authorized team changes production. No production execution by AEGIS.

Build contract: canonical shell traced to the two SHA-verified reference screenshots; product truth from the ten-round Codex×Claude consensus. Visual fidelity never implies an unproven capability.

CISO — Operator Console