Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de
59 lines
2 KiB
JSON
59 lines
2 KiB
JSON
{
|
|
"interface": "railiance.custody-projection-contract",
|
|
"version": 1,
|
|
"workplan_id": "RAILIANCE-WP-0025",
|
|
"engagement_id": "WH-ENG-20260822-AUDIT-E2-03",
|
|
"status": "approved",
|
|
"engagement_contract_sha256": "23f2cb4e734dda7b767a067d0e72c7da4ec5e466e141322a57a3b9eb6ea762e6",
|
|
"target": {
|
|
"id": "audit-core",
|
|
"namespace": "audit-core",
|
|
"deployment": "audit-core",
|
|
"container": "audit-core",
|
|
"sender_external_secret": "audit-core-senders",
|
|
"revision": "abd22fa0a64faca4c77752bb500c892d4f075ac5",
|
|
"image_digest": "sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6",
|
|
"contract_sha256": "5bf926e9da394da28e1d2cb11ead33d6d27a20b40914d8097b1041b35a18696e"
|
|
},
|
|
"runner": {
|
|
"namespace": "whitehat",
|
|
"service_account": "whitehat-runner",
|
|
"secret_name": "whitehat-e2-audit-credentials-03",
|
|
"mount_root": "/var/run/secrets/whitehat",
|
|
"manifest_sha256": "41201af08df484659f1eb89e19acb8042fc44cd3eeac1369784e8ce9e2166c4a"
|
|
},
|
|
"window": {
|
|
"starts_at": "2026-08-22T22:00:00Z",
|
|
"projection_cutoff": "2026-08-22T22:03:00Z",
|
|
"expires_at": "2026-08-22T22:15:00Z"
|
|
},
|
|
"authority": {
|
|
"remote": "railiance01",
|
|
"registry_path": "platform/workloads/audit-core/senders",
|
|
"registry_field": "senders.json",
|
|
"kv_mount": "platform",
|
|
"kv_prefix": "engagements/WH-ENG-20260822-AUDIT-E2-03/audit-core",
|
|
"eso_service_account": "external-secrets",
|
|
"eso_namespace": "external-secrets"
|
|
},
|
|
"identities": [
|
|
{
|
|
"handle": "token-a",
|
|
"role": "attacker",
|
|
"sender_name": "whitehat-e2-a-20260822-03",
|
|
"tenant": "tenant:trial:whitehat-a-20260822-03",
|
|
"mount_path": "/var/run/secrets/whitehat/token-a",
|
|
"may_read": true,
|
|
"may_write": true
|
|
},
|
|
{
|
|
"handle": "token-b",
|
|
"role": "owner",
|
|
"sender_name": "whitehat-e2-b-20260822-03",
|
|
"tenant": "tenant:trial:whitehat-b-20260822-03",
|
|
"mount_path": "/var/run/secrets/whitehat/token-b",
|
|
"may_read": true,
|
|
"may_write": true
|
|
}
|
|
]
|
|
}
|