23 lines
886 B
JSON
23 lines
886 B
JSON
|
{
|
||
|
|
"schema_version": "whitehat-target/v1",
|
||
|
|
"target_id": "tenant-engine",
|
||
|
|
"posture_claim": "implemented E2; currently evidenced E1",
|
||
|
|
"attacker_model": "E2-authenticated-tenant-a",
|
||
|
|
"applicability": "not_applicable",
|
||
|
|
"applicability_reason": "No authenticated tenant-A identity with no tenant-B authority exists. The platform operator is allowed to address every tenant; an unregistered actor tests caller authorization, not E2. Whitehat will not substitute either identity to finish the workplan.",
|
||
|
|
"approval_classes": ["live-e2"],
|
||
|
|
"routes": [],
|
||
|
|
"identities": {
|
||
|
|
"count": 2,
|
||
|
|
"role": "ordinary tenant-scoped caller; none currently exposed",
|
||
|
|
"ttl_seconds": 900,
|
||
|
|
"broker_audience": "whitehat-e2/tenant-engine"
|
||
|
|
},
|
||
|
|
"abort_telemetry": [
|
||
|
|
"p95_latency_ms",
|
||
|
|
"probe_attributable_5xx",
|
||
|
|
"unexpected_or_non_fixture_data",
|
||
|
|
"missing_attribution"
|
||
|
|
]
|
||
|
|
}
|