whitehat-security/workplans/WHITEHAT-WP-0002-receipt-admission-and-abort-records.md

---
id: WHITEHAT-WP-0002
type: workplan
title: "Receipt admission example, CLI coverage, and abort records"
domain: infotech
repo: whitehat-security
status: finished
owner: net-kingdom
topic_slug: whitehat-security
created: "2026-08-22"
updated: "2026-09-01"
state_hub_workstream_id: "4edaff12-3253-510b-8e9f-5547b8feb260"
quality_dod: DoD-Ok
quality_dod_at: "2026-09-01"
quality_dod_by: grok
quality_dod_note: "T01–T03 done; example receipt, admit-plane CLI, and abort evidence class are checked in. Authorizes no live trial."
---

# WHITEHAT-WP-0002 — receipt admission and abort records

## Goal

Close the gap that aborted `WH-ENG-20260822-AUDIT-E2-02`: operators need a
checked-in value-safe receipt shape, a CLI path that issues a plane lease
from it, and a way to record an abort without calling it target evidence.

This plan does **not** authorize a live trial. The next E2 run remains a new
engagement under WHITEHAT-WP-0001.

## Tasks

### T01 — Example projection receipt

```task
id: WHITEHAT-WP-0002-T01
status: done
priority: high
state_hub_task_id: "e2819255-da5f-5c23-9eb3-a10aa6066022"
```

Checked-in example with no secret material, matching
`schemas/projection-receipt.schema.json`. Operators copy it at window start
instead of inventing a shape under the three-minute mint gate.

### T02 — CLI coverage for `admit-plane --receipt`

```task
id: WHITEHAT-WP-0002-T02
status: done
priority: high
state_hub_task_id: "1e19bfaa-0d4d-591d-be59-487d60df81ca"
```

Prove the CLI admits from a valid receipt, refuses secret material, and still
fails closed without `--receipt`.

### T03 — Abort records are not target assurance

```task
id: WHITEHAT-WP-0002-T03
status: done
priority: medium
state_hub_task_id: "177b1d2d-bebb-5527-958c-11034150f86e"
```

Allow `evidence_class: abort` so a zero-packet abort can be queued without
being a Tenancy Posture artifact. Record `WH-ENG-20260822-AUDIT-E2-02` that
way.

## Sequencing

T01 and T02 can proceed together. T03 is independent. None of this is a live
run.