Kill-Chain Path Drift

Is the SAME compromise path persistently open across re-scans?

AgentSmack's kill-chain correlator reconstructs the end-to-end attack path in one run. Posture drift grades the scorecard-SCORE series over re-runs. This lens is the missing axis between them: it reasons over the correlated kill-chain PATH across a series of three or more runs. It answers the CISO re-scan question a flat findings diff cannot — is the SAME compromise path persistently open (recurring_compromise), did a NEW chain emerge as a regression (new_regression), or did one resolve (all_resolved) — distinguishing one recurring CHAIN from many recurring unrelated dings. A recurring complete kill-chain caps the drift score and forces not_ready, non-launderable. Pure, deterministic, migration-free: the caller supplies the runs, no DB. Load a sample series below to watch the verdict swing with no live infra.

Related read-only meta-lenses over the same findings envelope: Attack-Path / Kill-Chain Correlation → (one run) · Posture Drift → (scorecard-score series).

Sample re-scan series

  1. seq 0scan-w13 finding(s)
    rag_scan:injectionmcp_scan:privilege_overreachegress:canary_exfiltrated_to_unauthorized_sink
  2. seq 1scan-w23 finding(s)
    rag_scan:injectionmcp_scan:privilege_overreachegress:canary_exfiltrated_to_unauthorized_sink
  3. seq 2scan-w33 finding(s)
    rag_scan:injectionmcp_scan:privilege_overreachegress:canary_exfiltrated_to_unauthorized_sink

The card below grades locally via the pure core in real time; the button additionally round-trips the same series through /api/v1/chain-drift.

Kill-chain path drift

Recurring compromise

RECURRING COMPROMISE — the SAME complete kill-chain path is persistently open across the series (drift 39/100, grade F, 3 runs). 1 complete chain(s) tracked. This is one recurring CHAIN, not unrelated dings; the score is capped and the band forced not_ready. Block the deploy until the path is broken.

Drift score

39/100

grade F · not ready · 3 runs

Trajectory — complete-chain presence + reach depth per run

scan-w1complete chaindepth exfiltrate
scan-w2complete chaindepth exfiltrate
scan-w3complete chaindepth exfiltrate

Correlated paths across the series (1)

  • Persistent opencomplete kill-chainseen ×3 · first run 0 · last run 2 · in latest
      entry rag_scan:injection→escalate mcp_scan:privilege_overreach→exfiltrate egress:canary_exfiltrated_to_unauthorized_sink