tegwick
18ec61a696
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a05e30-2884-71b0-98d7-7edd16ae737b
45 lines
2 KiB
Markdown
45 lines
2 KiB
Markdown
# Conformance review register
|
||
|
||
Gate House records doctrine dispositions for returned assurance and posture
|
||
reports here. This directory does not hold raw exploit evidence, credential
|
||
values, severity decisions, or another repository's remediation tasks.
|
||
|
||
Normative inputs:
|
||
|
||
- [`asm-assurance-targets.v1`](../assurance/asm-t01-t10-executable-targets.md);
|
||
- [`asm-targets.yaml`](../assurance/asm-targets.yaml);
|
||
- [`conformance-reporting.v1`](../contracts/conformance-reporting.md);
|
||
- [`posture-findings-return.v1`](../contracts/posture-findings-return.md).
|
||
|
||
A review record names the external report and safe evidence references, copies
|
||
the executor's outcome without changing it, records Gate House's doctrine
|
||
disposition, and links every residual to a live owner.
|
||
|
||
Returned reviews:
|
||
|
||
- [`2026-09-02 — kings-guard qonto live observation`](2026-09-02-kings-guard-qonto-live-observation.md):
|
||
origin-linked advisory observation is staffed for one lane; load-bearing deny
|
||
stream completeness remains unknown; doctrine disposition `no_change`.
|
||
|
||
Fixture-safe candidates awaiting independent execution:
|
||
|
||
- [`2026-09-02 — secrets-engine T-06 approval-consumption candidate`](2026-09-02-secrets-engine-t06-candidate.md):
|
||
the implementer's focused suite passes, but no whitehat-owned known-bad
|
||
calibration or verdict has returned.
|
||
|
||
Coordination reviews:
|
||
|
||
- [`2026-09-02 — whitehat ASM triage review`](2026-09-02-whitehat-asm-triage-review.md):
|
||
all ten targets are triaged and remain `pending`; Gate House accepted the
|
||
class split and routes while requesting reassessment of one stale T-06
|
||
blocker.
|
||
|
||
Fixture calibration reviews:
|
||
|
||
- [`2026-09-02 — Whitehat ASM T-01–T-10 fixture calibrations`](2026-09-02-whitehat-asm-fixture-calibrations.md):
|
||
all known-bad fixtures produce findings and known-good fixtures pass; live
|
||
targets remain `pending` / `not_run`; doctrine disposition `no_change`.
|
||
|
||
No live whitehat-security ASM execution report has returned under
|
||
`conformance-reporting.v1`. The live target set remains `not_run`, not
|
||
conformance.
|