A hierarchical Markov decision framework for enhancing critical infrastructure resilience under sequential interdictions