Run controlled exploitation against confirmed vulnerabilities while enforcing scope and authorization gates.