Build a recoverable Kali Linux penetration testing lab with clear targets, controlled privileges, network boundaries, and planned updates.