100 lines
2.8 KiB
JSON
100 lines
2.8 KiB
JSON
|
{
|
||
|
|
"cadence": {
|
||
|
|
"interval": "24h",
|
||
|
|
"maximum_detection_window": "24h plus run and reporting latency",
|
||
|
|
"reset_triggers": [
|
||
|
|
"schema migration",
|
||
|
|
"role or grant change",
|
||
|
|
"RLS policy change",
|
||
|
|
"security-definer function change",
|
||
|
|
"posture mechanism change"
|
||
|
|
],
|
||
|
|
"triggered_run_deadline": "before deployment promotion"
|
||
|
|
},
|
||
|
|
"ended_at": "2026-08-22T07:39:54.791280Z",
|
||
|
|
"evidence_class": "fixture",
|
||
|
|
"known_bad": [
|
||
|
|
{
|
||
|
|
"outcome": "finding",
|
||
|
|
"probe_id": "conformance-view-empty",
|
||
|
|
"reason": "expectation failed: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "finding",
|
||
|
|
"probe_id": "unset-guc-reads-none",
|
||
|
|
"reason": "expectation failed: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "finding",
|
||
|
|
"probe_id": "tenant-a-cannot-read-b",
|
||
|
|
"reason": "expectation failed: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "finding",
|
||
|
|
"probe_id": "tenant-a-cannot-insert-b",
|
||
|
|
"reason": "expectation failed: statement_rejected"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "finding",
|
||
|
|
"probe_id": "runtime-lacks-bypassrls",
|
||
|
|
"reason": "expectation failed: false"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "finding",
|
||
|
|
"probe_id": "unsafe-definer-inventory-empty",
|
||
|
|
"reason": "expectation failed: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "inconclusive",
|
||
|
|
"probe_id": "sql-compromise-reset",
|
||
|
|
"reason": "E3-B observation records the documented SQL-compromise limit"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"known_good": [
|
||
|
|
{
|
||
|
|
"outcome": "pass",
|
||
|
|
"probe_id": "conformance-view-empty",
|
||
|
|
"reason": "expectation met: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "pass",
|
||
|
|
"probe_id": "unset-guc-reads-none",
|
||
|
|
"reason": "expectation met: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "pass",
|
||
|
|
"probe_id": "tenant-a-cannot-read-b",
|
||
|
|
"reason": "expectation met: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "pass",
|
||
|
|
"probe_id": "tenant-a-cannot-insert-b",
|
||
|
|
"reason": "expectation met: statement_rejected"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "pass",
|
||
|
|
"probe_id": "runtime-lacks-bypassrls",
|
||
|
|
"reason": "expectation met: false"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "pass",
|
||
|
|
"probe_id": "unsafe-definer-inventory-empty",
|
||
|
|
"reason": "expectation met: zero_rows"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"outcome": "inconclusive",
|
||
|
|
"probe_id": "sql-compromise-reset",
|
||
|
|
"reason": "E3-B observation records the documented SQL-compromise limit"
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"limitations": [
|
||
|
|
"Offline E3 calibration evaluates the harness; it is not target assurance.",
|
||
|
|
"No database connection or live credential was used.",
|
||
|
|
"sql-compromise-reset is E3's documented limit and stays inconclusive."
|
||
|
|
],
|
||
|
|
"outcome": "pass",
|
||
|
|
"run_id": "e3-calibration-2026-08-22T07:39:54.791131Z",
|
||
|
|
"schema_version": "whitehat-e3-calibration/v1",
|
||
|
|
"started_at": "2026-08-22T07:39:54.791131Z"
|
||
|
|
}
|