fast enumeration

Use a bounded VM enumeration pass to record reachable services, scan scope and unresolved questions. Preserve timing choices and raw evidence, then distinguish quick triage from the complete inventory or follow-up the task requires.