45 lines
1.3 KiB
JSON
45 lines
1.3 KiB
JSON
|
{
|
||
|
|
"schema_version": "whitehat-target/v1",
|
||
|
|
"target_id": "asm-t06",
|
||
|
|
"posture_claim": "ASM T-06",
|
||
|
|
"attacker_model": "replay, mutation, race, or post-revocation reuse of a bound approval",
|
||
|
|
"applicability": "pending",
|
||
|
|
"applicability_reason": "No synthetic approval fixture and no admitted consumption contract in this plane. Known-bad design: disable one binding dimension or atomic consumption so a prohibited replay is accepted. This registration does not authorize a probe.",
|
||
|
|
"approval_classes": [
|
||
|
|
"asm"
|
||
|
|
],
|
||
|
|
"specification": "asm-assurance-targets.v1",
|
||
|
|
"test_id": "T-06",
|
||
|
|
"title": "Approval Replay Test",
|
||
|
|
"claims": [
|
||
|
|
"A-04",
|
||
|
|
"A-07",
|
||
|
|
"A-13",
|
||
|
|
"A-15"
|
||
|
|
],
|
||
|
|
"oracle": "only-live-exactly-bound-unconsumed-request-succeeds",
|
||
|
|
"surface": [
|
||
|
|
"approval-engine",
|
||
|
|
"access-engine",
|
||
|
|
"consuming-pep"
|
||
|
|
],
|
||
|
|
"result_route": {
|
||
|
|
"conformance": "gate-house",
|
||
|
|
"implementation_finding": "risk-nexus",
|
||
|
|
"specification_finding": "gate-house",
|
||
|
|
"harness_gap": "whitehat-security"
|
||
|
|
},
|
||
|
|
"routes": [],
|
||
|
|
"identities": {
|
||
|
|
"count": 0,
|
||
|
|
"role": "none until the owning surface names a test identity",
|
||
|
|
"broker_audience": "whitehat-asm/t-06"
|
||
|
|
},
|
||
|
|
"abort_telemetry": [
|
||
|
|
"kill_switch",
|
||
|
|
"scope_boundary",
|
||
|
|
"missing_known_bad_calibration",
|
||
|
|
"secret_value_observed"
|
||
|
|
]
|
||
|
|
}
|