Publish authoritative E2 owner and original evidence expiry

Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2

tenancy.yaml

@@ -1,6 +1,6 @@
 # audit-core tenancy posture
 #
-# Declared per NetKingdom Tenancy Posture v0.1 (draft-8),
+# Declared per NetKingdom Tenancy Posture v0.1 (draft-14),
 # net-kingdom/canon/standards/tenancy-posture_v0.1.md.
 # Location and schema per Decision 5.4; per-path detail per Decision 5.2;
 # provider block per Decision 5.5.
@@ -13,6 +13,7 @@ schema_version: "0.1"
 framework: netkingdom-tenancy-posture
 service: audit-core
 role: tenant-audit-service
+responsible_repo: audit-core
 
 tenancy:
   reviewed: "2026-08-22"
@@ -171,3 +172,30 @@ evidence:
   R2:
     - "rapp-postgres/consumers/audit-core.yaml"
     - "tests/test_interface.py"
+
+# NK-WP-0031: structured publication of the existing bounded E2 receipt.
+# Adoption records its original expiry; it does not renew evidence or approve
+# another engagement. Recovery evidence for V1 is not E2 evidence.
+evidence_freshness:
+  E2:
+    kind: adversarial
+    observed_at: "2026-08-22T22:10:25Z"
+    valid_until: "2026-08-23T22:10:25Z"
+    responsible_repo: audit-core
+    scope: >-
+      WH-ENG-20260822-AUDIT-E2-03: ten operations across the event-by-id,
+      correlation-slice and append-as-other-tenant probes. The ordinary
+      tenant-A identity could not read or append tenant-B fixtures. Supports
+      only the attempted attacks on the pinned target revision, not an
+      assertion that the boundary always holds. Receipt:
+      docs/evidence/AUDIT-WP-0008-T05-whitehat-e2-03-pass-2026-08-22.md.
+    remediation: >-
+      Under AUDIT-WP-0015-T02, obtain the owner-confirmed bounded identities
+      and a new Whitehat engagement with fresh plane admission and exact
+      rules-of-engagement approval; run the cross-tenant E2 probes, complete
+      receipt-bound cleanup, and publish the replacement report and freshness
+      metadata. Prior -01/-02/-03 engagements are terminal and cannot be reused.
+      Re-evaluate after relevant boundary changes before promotion. A later
+      recovery exercise does not renew E2, and this declaration authorizes
+      no live run.
+    source_revision: "sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6"