Red Teaming

Core principle: Assume the system will be attacked, gamed, or stressed by an intelligent adversary. Think like the attacker, not the designer. Find the weaknesses before they're exploited.

Red Team Mindset

A red team actively tries to break the system — not to validate assumptions, but to invalidate them.

Key shifts:

• Assume hostile intent: How would a bad actor abuse this?
• Assume failure: Start from "this has failed" — what enabled it?
• Assume partial information: What does the adversary know that defenders don't?
• Assume creativity: Attackers aren't constrained by intended use
• Asymmetry: Defenders must protect everything; attackers only need one opening