Active Directory Tier Zero remains the dominant intrusion path in enterprise environments in 2026. Field notes on inventory, credential separation, and the engineering discipline that defeats it.