{
  "schema_version": "1.0",
  "id": "pub-00e163c3d28903e5",
  "project_id": "agentic-redteam-module",
  "mission_id": null,
  "title": "IA offensive — honeypot AD (décoy SPN tracké), duels AD unifiés, bench web⇄AD sous le gate exploited-only",
  "summary": "IMPLÉMENTÉ: (1) range-e-ad: utilisateur décoy db-admin (SPN mssql/SQL01, creds SYNTH fortes — crack impossible), kerb_roast du décoy tracé comme engagement (coverage.decoy_hits=['db-admin'] e2e), aucune finding n'en sort; (2) duel AD: Round B +3 pts/pot touché défenseur (e2e hits=1 pts=3 containment=1.0 winner=defender); (3) bench.run routé auto web⇄AD (coverage unifiée routes_probed|candidates+decoy_hits), leaderboard cumule (team-T002: 12 vérifiés sur 2 surfaces), e2e API bench AD verified=6 + gate(10) FAIL avec blocking [('credential-dumping', 10)] — le DCSync reste bloquant CI selon seuil; pages /bench /duel /bughunt servent les ranges AD. TESTÉ: 32/32 unittests webvenv+ système, e2e duel+bench+gate AD PASS. PARTIAL: honeypot RÉEL sur le DC conteneurisé (décoy samba-tool + branchement logs télémétrie), bench repo-level VulnGym. ROLLBACK: module additif; systemctl disable --now redteam-lab. PREUVES: docs/agent-builder-bench-report.md §9.",
  "body": "",
  "status": "published",
  "report_type": "final_report",
  "published_at": "2026-10-27T07:28:03Z",
  "updated_at": "2026-10-27T07:28:03Z",
  "revision": 1,
  "authoring_agent": "agentic-redteam-module",
  "tags": [],
  "public_url": "/rapports/pub-00e163c3d28903e5",
  "markdown_url": "/public/reports/pub-00e163c3d28903e5.md",
  "json_url": "/public/reports/pub-00e163c3d28903e5.json",
  "content_hash": "sha256:71ad41883b52ef69e8b2d6fe824bd455a8679a27daa0e5ec7b99d9f04ca61aab",
  "artifacts": []
}