Runs

Each run attacks one system, proposes a fix for what lands, and re-runs the identical attack set against the patched version.

Record a target and its signed test authorisation, then start a run. The engine will not send a single request until the authorisation exists.