whitehat-security/targets/README.md

# Target registrations

A target name is not an E2 boundary. Each file in this directory is the
honest applicability record the test plane admits against.

| `target_id` | Applicability | Meaning |
| --- | --- | --- |
| `fixture-e2` | applicable | In-process known-good/known-bad harness. Offline only. |
| `audit-core` | applicable | Two ordinary tenant-scoped senders instantiate E2. Dated pass `WH-ENG-20260822-AUDIT-E2-03`; that ID is terminal. |
| `tenant-engine` | not_applicable | No tenant-A identity without tenant-B authority. |
| `flex-auth` | pending | Initial envelope; owner has not confirmed the attacker identity. |
| `fixture-e3` | applicable | In-process E3 evaluator. One runtime identity, no `BYPASSRLS`. |
| `platform-pg` | not_applicable | No ordinary runtime identity can read the conformance view. |
| `fixture-capacity` | applicable | In-process P1/P2 evaluator. Generates no load. |
| `shared-substrate` | pending | Live capacity needs an operator window and aggressor ceiling. |
| `asm-t01` … `asm-t10` | pending | Gate House ASM T-01…T-10. Separate `asm` class; not E2/E3/capacity. See `WHITEHAT-WP-0007`. |

`not_applicable` is a completed artifact, not a deferral. Do not relabel it to
close a workplan. Do not reuse cancelled engagement IDs from `engagements/`.
Pending ASM targets are not admitted. They preserve Canon `test_id` values.
Add governed test plane and close T04/T08 Encode fail-closed admission, target registrations, and a credential broker that never returns secret values. Calibrate audit-core shaped probes in-process. Send no packets and request no live credentials. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb 2026-08-22 00:44:21 +02:00			`# Target registrations`

			`A target name is not an E2 boundary. Each file in this directory is the`
			`honest applicability record the test plane admits against.`

			\| `target_id` \| Applicability \| Meaning \|
			`\| --- \| --- \| --- \|`
			\| `fixture-e2` \| applicable \| In-process known-good/known-bad harness. Offline only. \|
Record the audit-core E2-03 target pass and close T03/T07 Land the sanitized WH-ENG-20260822-AUDIT-E2-03 report, mark the engagement completed and terminal, and close the applicable E2 harness and risk-nexus delivery tasks. flex-auth stays pending; tenant-engine stays not_applicable. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb 2026-08-23 00:42:31 +02:00			\| `audit-core` \| applicable \| Two ordinary tenant-scoped senders instantiate E2. Dated pass `WH-ENG-20260822-AUDIT-E2-03`; that ID is terminal. \|
Add governed test plane and close T04/T08 Encode fail-closed admission, target registrations, and a credential broker that never returns secret values. Calibrate audit-core shaped probes in-process. Send no packets and request no live credentials. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb 2026-08-22 00:44:21 +02:00			\| `tenant-engine` \| not_applicable \| No tenant-A identity without tenant-B authority. \|
			\| `flex-auth` \| pending \| Initial envelope; owner has not confirmed the attacker identity. \|
Admit E3 and capacity on the test plane Register in-process E3 and capacity fixtures, keep live database and substrate targets pending, and ask ops-mason for namespace-only provision. No packets, no credentials, no cancelled engagement IDs. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb 2026-08-22 09:40:27 +02:00			\| `fixture-e3` \| applicable \| In-process E3 evaluator. One runtime identity, no `BYPASSRLS`. \|
Expire WH-ENG-20260822-AUDIT-E2-01 after an unused window The 18:00Z-18:15Z window ended with no projection-ready notice and zero packets. Mark the identifier terminal. Record platform-pg E3 as not applicable for an ordinary runtime conformance-view identity. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb 2026-08-22 20:20:38 +02:00			\| `platform-pg` \| not_applicable \| No ordinary runtime identity can read the conformance view. \|
Admit E3 and capacity on the test plane Register in-process E3 and capacity fixtures, keep live database and substrate targets pending, and ask ops-mason for namespace-only provision. No packets, no credentials, no cancelled engagement IDs. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb 2026-08-22 09:40:27 +02:00			\| `fixture-capacity` \| applicable \| In-process P1/P2 evaluator. Generates no load. \|
			\| `shared-substrate` \| pending \| Live capacity needs an operator window and aggressor ceiling. \|
Promote ASM T-01–T-10 into WHITEHAT-WP-0007 and triage each test Extend whitehat-target/v1 with fixture-asm/asm instead of mapping onto E2, E3, or capacity. Register all ten Canon tests as pending with named blockers, known-bad designs, and result routes. Add a value-safe conformance-message renderer. Authorizes no probe. Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9 2026-09-02 01:11:16 +02:00			\| `asm-t01` … `asm-t10` \| pending \| Gate House ASM T-01…T-10. Separate `asm` class; not E2/E3/capacity. See `WHITEHAT-WP-0007`. \|
Add governed test plane and close T04/T08 Encode fail-closed admission, target registrations, and a credential broker that never returns secret values. Calibrate audit-core shaped probes in-process. Send no packets and request no live credentials. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb 2026-08-22 00:44:21 +02:00
			`not_applicable` is a completed artifact, not a deferral. Do not relabel it to
			close a workplan. Do not reuse cancelled engagement IDs from `engagements/`.
Promote ASM T-01–T-10 into WHITEHAT-WP-0007 and triage each test Extend whitehat-target/v1 with fixture-asm/asm instead of mapping onto E2, E3, or capacity. Register all ten Canon tests as pending with named blockers, known-bad designs, and result routes. Add a value-safe conformance-message renderer. Authorizes no probe. Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9 2026-09-02 01:11:16 +02:00			Pending ASM targets are not admitted. They preserve Canon `test_id` values.