coulomb/audit-core
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(consistency): sync task status from DB [auto]
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Updated by fix-consistency on 2026-10-04:
  - update .custodian-brief.md for audit-core

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a1046e-465c-7d43-8c4c-d10f0a1feadd
This commit is contained in:
custodian-sync 2026-10-04 11:37:42 +02:00
parent 146f4e1dd3
commit 71c6edc03d
4 changed files with 16 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

1
workplans/AUDIT-WP-0013-cross-repo-sender-admission.md
View file

@ -76,4 +76,3 @@ state_hub_task_id: "76b59808-abc3-5b8d-b31a-e3fb611f2cbe"
```
QONTO-WP-0006-T02. Audit-core owns admission and review of accepted mapping; rapp-qonto owns runtime delivery. Required inputs and proposed audit.allow/audit.deny/audit.heartbeat mapping are in docs/cross-repo-evidence-admission.md. Retain original stream instance, sequence and source counts. Approve deterministic retry IDs, heartbeat vouched-for class, authoritative tenant and acceptance-time/sequence-window comparison. Supply pinned collector/runtime artifacts, sanitized success/failure receipts and actual accepted records. Neither source stdout nor finished RAPP-QONTO-WP-0003 closes this gate. KG-WP-0005-T03 observer acceptance follows sender proof, never precedes it.

1
workplans/AUDIT-WP-0014-execution-attribution-receipt.md
View file

@ -39,4 +39,3 @@ state_hub_task_id: "33efb421-8dd7-5311-8447-9d6ca00992ba"
```
Return artifact paths/digests, unknown/optional semantics and positive/negative fixtures covering every proposed receipt field. Railiance returns source/type, run-id/idempotency binding, scope, classification/cadence and custody policies. Then enforce canonical data validation and tenant equality before acceptance; test malformed content, secret withholding, duplicate/conflict and unchanged unknowns. Generic JSON storage is not canonical receipt validation. No local substitute schema or default actor is fabricated.

1
workplans/AUDIT-WP-0015-independent-evidence-returns.md
View file

@ -41,4 +41,3 @@ state_hub_task_id: "e8a9cd4f-0267-524a-8ddd-5e1cec33e3af"
```
WHITEHAT-WP-0006-T03 stays wait. Prior -01/-02/-03 engagements are terminal; Whitehat requested no run. The alternative confirmation is access-engine-owned. asm-t08 needs its surface owner to name component revision, identities, window and technique. Preserve historical AUDIT-WP-0008-T05 completion and exact whitehat-security commit 7b5bc1e444cf57ae5d9ba1dac0c0189c0833e278. No engagement is minted, live run approved or packet sent. Requirements are recorded in docs/cross-repo-evidence-admission.md.