Multi-agent foundations (Phases 1+2): dynamic attack surface + revealed_targets

first commit