2026-08-21 23:53:27 +02:00
|
|
|
# Engagement records
|
|
|
|
|
|
|
|
|
|
Copy `template.json` to a dated, target-specific record and have both the
|
|
|
|
|
operator and target owner approve it before a live run. The runner validates
|
|
|
|
|
the record at execution time and fails closed when it is incomplete, expired,
|
|
|
|
|
outside its window, too permissive, or mismatched to the requested technique
|
|
|
|
|
or route.
|
|
|
|
|
|
|
|
|
|
An engagement record contains authorization metadata only. Never put a token,
|
|
|
|
|
password, database URL, secret path value, or real tenant identifier here.
|
|
|
|
|
|
2026-08-22 00:44:21 +02:00
|
|
|
Live admission also requires a matching file in `targets/` and a plane lease
|
|
|
|
|
from `whitehat admit-plane`. `WH-ENG-20260821-AUDIT-E2` and
|
|
|
|
|
`WH-ENG-20260821-TENANT-E2` are cancelled and must not be reused. The pod
|
|
|
|
|
manifest under `runtime/` is bound to a cancelled ID and must not be applied.
|
|
|
|
|
|
2026-08-22 21:31:49 +02:00
|
|
|
`WH-ENG-20260822-AUDIT-E2-01` expired unused. `WH-ENG-20260822-AUDIT-E2-02`
|
|
|
|
|
aborted after projection because `admit-plane` had no receipt adapter; zero
|
2026-08-23 00:42:31 +02:00
|
|
|
packets. `WH-ENG-20260822-AUDIT-E2-03` completed as a bounded target pass.
|
|
|
|
|
Those identifiers may not be reused. Live admission requires `--receipt`,
|
|
|
|
|
`--contract`, and `--broker-receipt` of WP-0025 documents.
|
2026-08-22 11:46:58 +02:00
|
|
|
|
