Operator-led red team engagements and adversary simulation — attacker-grade evidence before the real one arrives.