whitehat-security/evidence/offline-asm-t06-calibration.json

{
  "ended_at": "2026-09-02T11:04:58.385199Z",
  "evidence_class": "fixture",
  "known_bad": [
    {
      "openbao_calls": 2,
      "outcome": "pass",
      "probe_id": "t06-exact-consume",
      "reason": "first and same-digest retry consumed"
    },
    {
      "openbao_calls": 1,
      "outcome": "finding",
      "probe_id": "t06-different-digest-replay",
      "reason": "known-bad CAS accepted a different-digest replay and the PEP called OpenBao"
    }
  ],
  "known_good": [
    {
      "openbao_calls": 2,
      "outcome": "pass",
      "probe_id": "t06-exact-consume",
      "reason": "first and same-digest retry consumed"
    },
    {
      "openbao_calls": 0,
      "outcome": "pass",
      "probe_id": "t06-different-digest-replay",
      "reason": "different-digest replay rejected; OpenBao not called"
    }
  ],
  "limitations": [
    "Offline ASM T-06 calibration evaluates the harness against an in-process CAS.",
    "No network, OpenBao, live approval-engine, or reusable credential was used.",
    "Gate House cited secrets-engine 3cd9955; approval_consume.py first appears at 4b4d556.",
    "This is fixture evidence, not live target assurance."
  ],
  "outcome": "pass",
  "run_id": "asm-t06-calibration-2026-09-02T11:04:58.297167Z",
  "schema_version": "whitehat-asm-calibration/v1",
  "specification": "asm-assurance-targets.v1",
  "started_at": "2026-09-02T11:04:58.297167Z",
  "target": {
    "claimed_revision": "3cd9955ac935be398f0fbb6aa7263660a9888721",
    "component": "secrets-engine",
    "consume_module_revision": "4b4d556d6264a5da933f7e14aae0fe27ba1f4300",
    "module": "secrets_engine.approval_consume"
  },
  "test_id": "T-06"
}