Reconcile T06 calibration and risk disposition

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a05e30-2884-71b0-98d7-7edd16ae737b
This commit is contained in:
tegwick 2026-09-02 13:10:07 +02:00
parent b3fd044f55
commit 774f69ff80
5 changed files with 66 additions and 26 deletions

View file

@ -131,15 +131,14 @@ Progress 2026-09-02 — kings-guard accepted the return-path contract, completed
recorded `no_change`: the lane is staffed, while deny-stream completeness is
unknown pending heartbeat/reconciliation. Review:
`docs/conformance/2026-09-02-kings-guard-qonto-live-observation.md`. The
remaining completion gate is a calibrated whitehat result and a risk-nexus
intake disposition for the routed implementation finding. Gate House
acknowledged the King's Guard return and accepted
remaining completion gate is a contract-complete Whitehat return envelope.
Risk Nexus disposition is complete. Gate House acknowledged the King's Guard
return and accepted
whitehat's probe-ownership correction; whitehat follow-up
`c33c3a72-5bf3-4693-8861-9e9ad37d5908` requests the remaining fixture-safe
calibrated result without authorizing a live probe. A concrete T-06 candidate
is now recorded from secrets-engine revision `3cd9955`; its implementer suite
passes 17/17, while independent known-bad calibration and verdict remain
pending. Candidate:
is now recorded from secrets-engine revision `4b4d556`; its implementer suite
passed 17/17 in the initially observed working tree. Candidate:
`docs/conformance/2026-09-02-secrets-engine-t06-candidate.md`. The bounded
candidate was handed to whitehat-security in message
`cc19a1c4-2acf-448d-b90f-e9843a57a7d4`. Whitehat subsequently opened
@ -152,4 +151,9 @@ Gate House accepted the triage, class split, and result routes without contract
revision. All targets remain `pending`; T-06's blocker is under reassessment
against the supplied secrets-engine fixture candidate via message
`418fe53b-4a4b-4ebb-909e-62d206cd005f`. Review:
`docs/conformance/2026-09-02-whitehat-asm-triage-review.md`.
`docs/conformance/2026-09-02-whitehat-asm-triage-review.md`. Whitehat then
admitted fixture-only T-06 and returned a passing known-bad calibration at
revision `75deaf0`; Gate House reproduced the focused suite (53 passed). The
standalone `conformance-reporting.v1` envelope is still pending. Risk Nexus
registered the qonto residual as `RISK-F-0011` (medium, public, open, no
escalation) under `RISK-RULING-2026-09-02-A`, closing the finding-intake gate.