diff --git a/workplans/AUDIT-WP-0008-tenancy-posture-alignment.md b/workplans/AUDIT-WP-0008-tenancy-posture-alignment.md index 3b7e914..b8d1193 100644 --- a/workplans/AUDIT-WP-0008-tenancy-posture-alignment.md +++ b/workplans/AUDIT-WP-0008-tenancy-posture-alignment.md @@ -431,13 +431,15 @@ non-secret scope overlay. The expiry implementation is deployed from `abd22fa` as image `sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6`; -the receiver rolled out 1/1 Ready and returned operational `/readyz`. Formal -owner acknowledgement remains pending because target review found one stale, -undeclared 20260821 forged fixture ID in the new runner. Whitehat was asked in -`a810dae5-110f-4c3b-a4b8-f6763b4242a2` and -`5ffefc2d-a564-4244-8abc-88a5063a92a2` to bind that ID explicitly to the -20260822 engagement and refresh both target and runner digests before any -credential request. +the receiver rolled out 1/1 Ready and returned operational `/readyz`. Target +review found and corrected one stale, undeclared 20260821 forged fixture ID; +Whitehat commit `1418dac` makes it an explicit runner argument, declares its +20260822 value, tests invocation membership, and pins the deployed digest. +Audit-core formally acknowledged the corrected production engagement at +Whitehat commit `32afceb` on 2026-08-22T10:04:56Z. It validates for the approved +18:00–18:15Z window and fails closed before the window. Custody projection and +attended cleanup are now the remaining pre-run gate, routed in +`2cf6752a-c186-44a7-9d5f-2319a2ea68a2`; no credential exists yet. ```task id: AUDIT-WP-0008-T06