docs: record remaining Whitehat E2 evidence gates

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1046e-465c-7d43-8c4c-d10f0a1feadd

workplans/AUDIT-WP-0008-tenancy-posture-alignment.md

@@ -9,7 +9,7 @@ flavor: implementation
 owner: claude
 topic_slug: railiance
 created: "2026-08-17"
-updated: "2026-09-24"
+updated: "2026-10-04"
 depends_on:
   - AUDIT-WP-0007
 state_hub_workstream_id: "a9a248b2-d26c-503e-a8fc-4f3675e6ed51"
@@ -528,6 +528,21 @@ replacement due at 2026-08-23T22:10:25Z; sustaining it without minute-precise
 operator attendance now belongs in a multi-driver integration/e2e harness, not
 in another manual T05 sequence.
 
+**Follow-up 2026-10-04 — remaining external evidence gap.** State Hub message
+`81bebdd8-5ca7-47b3-aafe-1d00ff8be122` cites whitehat-security commit
+`7b5bc1e444cf57ae5d9ba1dac0c0189c0833e278`: `WHITEHAT-WP-0006-T03`
+remains `wait`. The historical T05 completion above is unchanged; its bounded
+2026-08-22 report does not supply fresh evidence for a later run.
+`WH-ENG-20260822-AUDIT-E2-01`, `-02`, and `-03` are terminal and cannot be
+reused. A later live E2 needs a new engagement ID, plane admission, and
+rules-of-engagement approvals. The alternative dependency is an access-engine
+confirmation of a flex-auth tenant-A identity with no tenant-B authority;
+audit-core cannot substitute an assumed identity or scope for that confirmation.
+`asm-t08` remains pending until its surface owner names the component revision,
+identities, window, and technique. This follow-up records those missing owner
+inputs only: no live run is approved, no engagement ID is minted, and no packet
+is authorized or sent.
+
 ```task
 id: AUDIT-WP-0008-T06
 status: done