Security Scenario Explorer — a proposed security-testing direction built on Combinatorics Framework JVM.

Most security tools look for known weaknesses. But some vulnerabilities appear when individually valid requests interact in an unexpected order.

A permission changes while a session remains active. A retry arrives after a timeout. A webhook is delivered twice. An AI agent reads untrusted content while holding access to a privileged tool. Each operation may look legitimate in isolation; the sequence may still violate a security boundary.

Security Scenario Explorer is a proposed workbench for investigating these interaction-driven failures systematically. It builds on Combinatorics Framework JVM, a scenario-modeling and execution framework developed by Yurii B.

It is not positioned as a replacement for vulnerability scanners, DAST, or fuzzers.…