A self-shaping audit that discovers the surfaces worth hunting for this target, aims them at the crown-jewel assets, and grows the surface on every confirmed hit. Candidates must survive skeptics who name-check a realistic actor and strip privileged-breach redundancy; survivors are proven, deduped, ranked with attackonomics demotions, then written up under do-no-harm rules and gated by a report-QA pass.