Abstract
ACSE's 11 mutation profiles are 11 expressions of a single MutationEngineCore, each tuned to a specific surface class. This paper describes each profile's domain, design insight, performance benchmark, crown jewel security claim, and integration pattern. All profiles enforce the Kali Invariant. Swapping one profile for another requires changing a single registration call.
All 11 profiles are covered by Indian Patent Published · IN202641070690 · 19/06/2026.
1. Profile Architecture
Every profile implements the MutationTarget trait: five methods that give MutationEngineCore everything it needs to manage any surface: fingerprint() → current state, mutate(entropy) → apply mutation, validate(result) → check invariant, rollback(checkpoint) → restore state, profile_id() → ASMP identifier.
| Infrastructure Class | Profile | ID |
|---|---|---|
| Intrusion response / active attacker | MantisNet | 0x01 |
| Cloud workloads / elastic scaling | JellyNet | 0x02 |
| Financial services / payments | SquidShield | 0x03 |
| Cloud cooperative enclaves | ChameleonNet | 0x04 |
| AD / credential surfaces / defence | KrakenNet | 0x05 |
| VPN / API deception | AnglerShield | 0x06 |
| Data vault / database | NautilusVault | 0x07 |
| Healthcare / HIPAA | GlassFrog | 0x08 |
| COLO / data centre / side-channel | ElectricEelGrid | 0x09 |
| Nation-scale / 16-node distributed | LeviathanGrid | 0x0A |
| Estate-wide orchestration | KaliCoreTarget | 0xFF |
2. Profile Reference
🦐 Profile 0x01: MantisNet — Intrusion Response
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 10.31µs p50 | 79.7k/s | 0x01 |
Key Mechanism: Five-state machine: Patrol→Strike→Retreat→Harden→Recover (131.8µs full cycle). Fastest profile.
Crown Jewel Claim:
107/107 Forced Twitch detections: every attacker probe triggers mutation, staling the attacker's observation.
Integration:
engine.register(Box::new(MantisNetTarget::new("perimeter")), "ids");🪼 Profile 0x02: JellyNet — Elastic Infrastructure
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 12.90µs p50 | 82.1k/s | 0x02 |
Key Mechanism: MVS (Minimum Viable Surface) guarantee at all load levels. Calm→critical transition: 1.09µs.
Crown Jewel Claim:
Mathematically guaranteed minimum surface exposure as a function of current load — the only profile providing this as a proven invariant.
Integration:
engine.register(Box::new(JellyNetTarget::new("api-gateway")), "cloud");🦑 Profile 0x03: SquidShield — Finance / Payments
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 15.94µs p50 | 76.1k/s | 0x03 |
Key Mechanism: Per-transaction surface rotation with atomic snapshot+restore for audit. PCI-DSS audit trail maintained throughout.
Crown Jewel Claim:
100% fingerprint uniqueness at 76.1k transactions/second. Zero collisions in 1,000 consecutive cycles.
Integration:
engine.register(Box::new(SquidShieldTarget::new("payment-api")), "fin");🦎 Profile 0x04: ChameleonNet — Cloud Cooperative Enclaves
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 23.15µs p50 | 38.8k/s | 0x04 |
Key Mechanism: Dual-channel: ally channel rotates on schedule known to authenticated peers; attacker channel has zero mutual information with ally channel.
Crown Jewel Claim:
Cryptographically proven zero mutual information between attacker and ally channels.
Integration:
engine.register(Box::new(ChameleonNetTarget::new("enclave-mesh")), "coop");🐙 Profile 0x05: KrakenNet — Defence / AD Surfaces
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 28.56µs p50 | 34.7k/s | 0x05 |
Key Mechanism: 4-arm independent mutation: network topology, credential identifiers, AD fingerprints, session tokens. Sever-and-regenerate: 90.26µs.
Crown Jewel Claim:
LSASS dump captured at time t is cryptographically stale at t+1 — defeats credential harvesting as used in Change Healthcare and Stryker-Handala.
Integration:
engine.register(Box::new(KrakenNetTarget::new("ad-surface")), "defence");🎣 Profile 0x06: AnglerShield — API Security / Deception
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 31.67µs p50 | 32.3k/s | 0x06 |
Key Mechanism: Real endpoint hidden behind rotating fingerprint. Four deception lures. Attacker captured at 3-probe threshold → KaliCore Hunter escalation.
Crown Jewel Claim:
Turns active reconnaissance into attacker liability: every probe advances identification and stales the model.
Integration:
engine.register(Box::new(AnglerShieldTarget::new("public-api")), "api");🐚 Profile 0x07: NautilusVault — Data Vault / Database
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 37.96µs p50 | 27.3k/s | 0x07 |
Key Mechanism: 5× Fibonacci protection gradient: outer layers (metadata) highest rotation rate, inner layers (sensitive PII/PHI) highest cryptographic strength. Siphuncle O(1) integrity: 8.024µs.
Crown Jewel Claim:
O(1) vault integrity verification in 8.024µs — independent of vault size. A vault of 100M records verifies as fast as a vault of 100.
Integration:
engine.register(Box::new(NautilusVaultTarget::new("phi-store")), "vault");🐸 Profile 0x08: GlassFrog — Healthcare / HIPAA
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 56.84µs p50 | 2,540/s* | 0x08 |
*Low throughput by design — each cycle appends a cryptographic HIPAA/GDPR compliance proof.
Key Mechanism: Dual-state: observable surface mutates (Kali Invariant); audit chain is cryptographically immutable. Each cycle appends a HIPAA/GDPR compliance proof.
Crown Jewel Claim:
The only profile providing HIPAA/GDPR audit compliance as a cryptographic proof, machine-verifiable by any regulator.
Integration:
engine.register(Box::new(GlassFrogTarget::new("phi-api")), "hipaa");⚡ Profile 0x09: ElectricEelGrid — COLO / Data Centre
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 58.33µs† p50 | 82.0k/s† | 0x09 |
†Sachs steady-state. Hunter and Main Organ modes increase mutation rate.
Key Mechanism: Computational workload randomisation alongside surface mutation: power/thermal side-channel signals are randomised. Power proof: 1.595µs.
Crown Jewel Claim:
The only available product defending the power side-channel in COLO environments. Red team cross-correlation: 0.03% — below exploitable threshold.
Integration:
engine.register(Box::new(ElectricEelGridTarget::new("dc-node")), "colo");🐉 Profile 0x0A: LeviathanGrid — Nation-Scale / 16-Node
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| 143.9µs p50 | 7.07k/s | 0x0A |
Key Mechanism: 16-node simultaneous mutation with full topology rewire. Grand hash (SHA3-256 of all 16 fingerprints): 43.75µs O(1).
Crown Jewel Claim:
16-node simultaneous mutation in 143.9µs — the entire distributed grid rotates before a single network round-trip completes. Defeats the 14-month SolarWinds topology mapping.
Integration:
engine.register(Box::new(LeviathanGridTarget::new("nation-grid")), "scale");🔱 Profile 0xFF: KaliCoreTarget — Meta-Profile / All
| Latency p50 | Throughput | Profile ID |
|---|---|---|
| < 200µs estate | All profiles | 0xFF |
Key Mechanism: One trigger fans out to all registered profiles simultaneously within a single scheduling window.
Crown Jewel Claim:
A single KaliCoreTarget trigger rotates every surface in the estate before an attacker can observe any pre-rotation state. ProVerif-verified as formally correct orchestration.
Integration:
engine.register(Box::new(KaliCoreTarget::new()), "all");3. TEE Compatibility and Profile Combinations
All 11 profiles are compatible with all 5 TEE adapters. Profiles are designed for simultaneous deployment — e.g., SquidShield (payments) + GlassFrog (PHI) + AnglerShield (API) + KrakenNet (AD) + KaliCoreTarget (estate coordination). Each profile operates independently; KaliCoreTarget triggers all simultaneously in under 200µs.
When multiple profiles are registered, each receives a statistically independent entropy slice: SHA3-256(entropy_bundle || profile_id || target_id || cycle_seq). No profile's mutation inputs can be inferred from another's.