Red is the adversarial AI node for Cogni: it maps live attack surface, probes for exploitable paths, and turns findings into blue-team fixes before they become incidents.
Recon. Exploit hypothesis. Blue handoff. Regression watch.Red does not wait for a security review. It keeps looking, attacking within scope, and handing blue teams the evidence they need to patch, verify, and harden the network.
The point is not theater. A Red signal is useful only when it gives Blue a clear proof, owner, mitigation path, and regression check the DAO can inspect.
A forced host resolver can prove the app serves behind Cloudflare, but it cannot prove a normal visitor can reach the node. Blue should require normal DNS resolution before deploy_verified.
API registration and browser auth are different trust paths. Red treats any claim of signed-in UX as unproven until a real session cookie reaches a gated page.