What the FY2027 request buys
Verbatim from the R-2A exhibit for project MSL-04 of PE 0602025E. This is the budget justification's own description of work that has not happened yet — the one thing no other level of the budget carries.
- Develop and demonstrate techniques for fully automated exploit chain synthesis, including link replacement and repair, in complex systems. - Advance the analysis and modelling of exploit chains to forecast exploit chain lifecycle in complex software systems that have state-of-the-art defenses. - Demonstrate the capability to reproduce exploit chains in software of interest to transition partners and integrate tools and capabilities into operational contexts.
The FY 2027 increase reflects continued development of exploit chain technologies and additional efforts related to demonstration and transition.
FY2026: the year under way
Prior-year accomplishments and current-year plans from the same exhibit. Context for the FY2027 plan, not a series — an activity partitions its project exactly in the request year, but can under-cover it in earlier years.
- Develop and demonstrate techniques for automated replacement and repair of exploit chains in complex systems. - Automate the analysis of the scale of applicability of the exploit chain across a corpus of software and firmware versions. - Extend the exploit chain model to incorporate and represent the system context.
Three years, and no five-year plan
An R-2A activity publishes the prior year, the current year and the budget year. The FYDP outyears exist at project and program-element level and are deliberately absent here rather than inferred. Estimate types are colored and never summed into one figure.
| Fiscal Year | Estimate Type | Amount ($M) |
|---|---|---|
| FY2026 | Enacted | 11.1 |
| FY2027 | Request | 12.6 |
This activity is 8.0% of project MSL-04's FY2027 request and 0.8% of PE 0602025E's. In the request year the activities under a project sum to it exactly; in the current year they under-cover it in about 9% of cases, so an activity's delta can legitimately exceed its parent's and the two must not be compared row to row.
11 activities in project MSL-04
Every R-2A line of this project, largest FY2027 request first. Linked where the activity has enough of its own narrative to carry a page; the rest are shown in full on the project page.