01 / BOUNDARYAgent Boundary
AI-agent behavior is observed across multiple boundaries, including User / Role, Company / Tenant, Data, and API / Tool boundaries. Blocking one access path is not enough. The Simulator also observes whether authorization boundaries remain effective when an agent explores an alternative route after a denial.
User / RoleTenantDataAPI / Tool
02 / FLOWAttack / Defense Flow
The Attack Agent receives a Goal and Scenario Profile, then selects routes, tools, and APIs according to the objective. When an action fails or is denied, it may change strategy and try another path. The Defense Agent observes the resulting behavior and Evidence and determines whether to detect, block, or contain the activity.
Attack AgentDefense AgentStrategy
03 / SCORINGSecurity Scoring
Scenario state is visualized using indicators such as Leakage Risk, Misuse Progress, Detection Score, Containment Score, and Defense Score. These are not security ratings for a customer environment. They are Simulator-specific indicators for comparing changes before and after hardening within the same Scenario.
LeakageDetectionContainmentDefense
04 / EVIDENCEEvidence / Audit
Agent decisions, selected routes and tools, execution results, and Defense-side decisions are recorded as Evidence. Rather than showing only whether an action succeeded or was blocked, the Simulator makes it possible to trace why the agent moved from one action to the next.
DecisionTool ResultTraceAudit
05 / LOCAL ARCHITECTURELocal LLM Architecture
Local LLM, Agent Runtime, FastAPI, Streamlit, PostgreSQL, and Docker are combined in a local environment covering inference, agent execution, API processing, visualization, and Evidence recording. Simulator demonstrations run inside this closed environment and do not require access to production systems.
Local LLMAgent RuntimeFastAPIStreamlitPostgreSQLDocker