From 9f4530bb4394a3e748a782824510a67418da4fbe Mon Sep 17 00:00:00 2001 From: tegwick Date: Sun, 4 Oct 2026 03:06:25 +0200 Subject: [PATCH] Accept the scoped Whitehat 0.2.6 review gate and retain T07 waits Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a1046e-4817-7f02-b732-e219136e037a --- .../2026-10-04-026-t07-source-check.json | 44 ++++++++++++++ ...ty-knowledge-and-netkingdom-integration.md | 60 ++++++++++++++++++- 2 files changed, 101 insertions(+), 3 deletions(-) create mode 100644 docs/evidence/2026-10-04-026-t07-source-check.json diff --git a/docs/evidence/2026-10-04-026-t07-source-check.json b/docs/evidence/2026-10-04-026-t07-source-check.json new file mode 100644 index 0000000..b91ed13 --- /dev/null +++ b/docs/evidence/2026-10-04-026-t07-source-check.json @@ -0,0 +1,44 @@ +{ + "schema": "emergent.knowledge-check.v1", + "version": "0.2.6", + "package_digest": "8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02", + "sources": { + "net-kingdom": "verified-files", + "gate-house": "verified-files", + "ops-warden": "verified-files", + "ops-mason": "verified-files", + "access-engine": "verified-files", + "security-canon": "verified-files", + "user-engine": "verified-files", + "tenant-engine": "verified-files", + "zone-engine": "verified-files", + "whitehat-security": "verified-files", + "kings-guard": "verified-files", + "secrets-engine": "verified-files", + "key-cape": "verified-files", + "approval-engine": "verified-files", + "informed-decision": "changed", + "audit-core": "verified-files", + "risk-nexus": "verified-files", + "info-tech-canon": "verified-files", + "ops-bridge": "verified-files", + "railiance-master": "verified-files", + "glas-harness": "verified-files", + "the-custodian": "verified-files", + "emergent-security": "verified-files", + "runbook-tutorials": "verified-files" + }, + "live_state_verified": false, + "ok": false, + "reconciliation": { + "date": "2026-10-04", + "pin": "b4f637326ba3c2526f4648c4c90544948408d53f", + "sibling_head": "b65363527e41a76140a3967fe5e84ef5fc2f190b", + "sibling_clean": true, + "differing_inventoried_path": "workplans/INFD-WP-0005-frictionless-decision-intake.md", + "pinned_sha256": "4f1b2c0e994033dec7a5e1e56593fa9ea3d9fbb4db4b7f5f9b56c675390abe83", + "sibling_sha256": "993dddfa4ba4f9e0131feab681091a6c919cba22901006c17e82d5e02a0d4083", + "pin_changed": false, + "startup": "withheld" + } +} diff --git a/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md b/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md index 6931db2..dcdcb5d 100644 --- a/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md +++ b/workplans/EMERGENT-WP-0002-agent-security-knowledge-and-netkingdom-integration.md @@ -287,9 +287,8 @@ priority: high state_hub_task_id: "9cc74076-4143-58d6-8791-fca0f34f430d" depends_on: - EMERGENT-WP-0002-T05 -blocked_on: message-from:whitehat-security -blocking_reason: The 0.2.6 28-case implementing review is recorded and is not an independent Whitehat disposition of RISK-F-0015; T07 has not accepted it, - and the 0.2.3 acceptance is not renewed. +blocked_on: message-from:glas-harness +blocking_reason: Whitehat-owned offline review is accepted for the exact 0.2.6 digest at f65d0e64. Full T07 acceptance remains withheld pending source reconciliation, complete current-release provider evidence including the missing exact Codex server model, route grading, and continuity/governed-harness evidence. RISK-F-0015 stays open. ``` Depends on T05 and T06. Build a provider-neutral scenario corpus and expected @@ -325,6 +324,61 @@ checkpoint below is that published-source review. T07 stays `wait`; T02/T05/T08/T09/T10 and the blocked plan status remain unchanged. Risk register and Whitehat task statuses belong to their owners. +**Current-release Whitehat gate disposition — 2026-10-04:** +Accept the Whitehat-owned offline adversarial review gate for knowledge **0.2.6**, +digest `8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`, +package commit `f65d0e64bc710eafb1dac4dd64b05516493d8c31`. Reviewed +Whitehat record at `db32a4174f71ca57a7ca73ad27a0a71609f0cb06`, +`WHITEHAT-WP-0010`, specifically +`evidence/2026-10-04-emergent-026-offline-review.md` and its library-probe +and corpus-disposition JSON records. Delivery is message +`d8ff7f8a-83c8-4f1e-9bd0-b2bd4b931c48`, thread +`e0f927e2-7221-4eb7-b263-7f8e45c5ada8`; use this copy, not `90f71acf`. +The separately authored, Whitehat-owned review meets the same bounded review +criterion as the historical disposition above. Shared workstation context is +disclosed; authenticated external independence and institutional assent are +not established. This accepts the review gate only, not full T07 acceptance. + +Nine library probes passed after every oracle rejected a known-bad result and +accepted a known-good result. WH-KNOW-001 and WH-KNOW-002 were not reproduced. +A pass means only that those attempted attacks did not work. The historical +0.2.3 remediation acceptance stays bound to its own digest. No universal +boundary, live assurance, or risk-register closure follows from these probes. + +Whitehat read all three 28-case records and found no unsafe effect recommendation. +All three route `zones` to `zone-engine` and `model-switch` to `session-owner`, +include `glas-harness` for the latter, and deny authority from the earlier +receipt. Seventeen fixture route tokens match per provider; eleven per provider +remain ungraded by Whitehat. Their unsafe-effect refusals do not satisfy T07's +complete boundary/owner/evidence scoring by themselves. Codex thread +`01a103e2-bd14-75c1-9a03-c24546307000` has no exact server-model identifier: +the exact-model acceptance clause is **not met**. Client labels, configured +defaults and parent identity cannot supply that missing provider evidence. +These records also do not prove compaction/resume or a governed harness session. +Complete current-release provider acceptance is withheld; RISK-F-0015 stays open. + +**Source reconciliation:** read-only comparison confirms clean sibling +`informed-decision` HEAD `b65363527e41a76140a3967fe5e84ef5fc2f190b` +against retained pin `b4f637326ba3c2526f4648c4c90544948408d53f`. +The inventoried `workplans/INFD-WP-0005-frictionless-decision-intake.md` +differs: updated date, completed predecessor removals, human-decision IDs for +T05/T10, and owner-routing notes retaining explicit human gates. This is +committed source drift even though the sibling is clean. It records no approval +or execution and does not justify ignoring the seal's freshness check. +[Current source receipt](../docs/evidence/2026-10-04-026-t07-source-check.json) +records 23 owners `verified-files`, `informed-decision: changed`, `ok: false`, +and `live_state_verified: false`. Source-validated `start` retrieval is withheld. +The launch-time all-verified receipt remains historical and is not renewed. +Retain the pin and seal; do not follow, edit, re-pin or reseal from the sibling. +Any future source renewal needs its own reviewed release reconciliation. + +T07 remains **wait**, now for the remaining provider/source/continuity gates +rather than this delivered Whitehat disposition. T05/T08/T09/T10 remain +**wait**; the workplan remains **blocked**. No DoD-Ok, risk closure, provider +attestation, packet submission, or institutional assent is claimed. Whitehat +and risk-nexus records remain under their owners. The requested State Hub +reply is delivery of this disposition only. + ## T08 — Pilot in representative ecosystem repositories ```task