coulomb/gate-house
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Reconcile T06 calibration and risk disposition

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a05e30-2884-71b0-98d7-7edd16ae737b
This commit is contained in:
tegwick 2026-09-02 13:10:07 +02:00
parent b3fd044f55
commit 774f69ff80
5 changed files with 66 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

14
docs/conformance/2026-09-02-secrets-engine-t06-candidate.md
View file

@ -5,7 +5,8 @@
**Date:** 2026-09-02
**Canon target:** T-06 — Approval Replay Test
**Implementer:** secrets-engine
**Implementation revision:** `3cd9955` (observed at repository revision `465c0d7`)
**Implementation revision:** `4b4d556`
**Initial observation:** uncommitted working tree at repository revision `465c0d7`
**Source:** State Hub message `99bf84bf-18d2-4e63-a7ac-25078e1c72d5`
**Workplan:** GH-WP-0001-T06
@ -26,8 +27,8 @@ secret, credential, approval service, or OpenBao mutation:
- a failed effect does not unconsume the approval;
- the evidence shape contains identifiers and digests, not secret values.
Gate House ran the implementer's focused unit suite as a target-suitability
check:
Gate House initially ran the implementer's focused unit suite against the
then-current working tree at revision `465c0d7` as a target-suitability check:
```text
uv run --project /home/worsch/secrets-engine \
@ -38,6 +39,12 @@ uv run --project /home/worsch/secrets-engine \
This confirms that a bounded fixture surface exists. It is not an offensive
probe, a known-bad calibration, or a conformance verdict.
Whitehat-security later established that `approval_consume.py` first appears
in committed history at `4b4d556`, not at `3cd9955` as Gate House initially
inferred from the surrounding workplan history. Gate House accepts that
correction. The initial test count remains a working-tree suitability check;
the immutable candidate revision is `4b4d556`.
## What whitehat-security must still supply
Whitehat-security owns the probe design and outcome. A conforming return still
@ -60,4 +67,3 @@ This candidate authorizes no live probe and no production OpenBao, credential,
approval, packet, or side effect. Whitehat may accept, revise, reject, or split
the candidate under its own rules of engagement. Gate House specifies only the
invariant, target, oracle, and report shape.