whitehat-security/targets/audit-core-e2.json

{
  "schema_version": "whitehat-target/v1",
  "target_id": "audit-core",
  "posture_claim": "implemented E2; dated target pass WH-ENG-20260822-AUDIT-E2-03 at 2026-08-22T22:10:25Z; review due 2026-08-23T22:10:25Z",
  "attacker_model": "E2-authenticated-tenant-a",
  "applicability": "applicable",
  "applicability_reason": "audit-core binds each sender token to a tenant set at one choke point. Two ordinary tenant-scoped senders instantiate the E2 model without operator or database privilege.",
  "approval_classes": ["live-e2"],
  "adapter": "runners/audit_core_e2.py",
  "probe_pack": "probe-packs/audit-core-e2.json",
  "known_bad_calibration": "src/whitehat_security/audit_fixtures.py",
  "fixture_lifecycle": {
    "create": "append two synthetic events and one reserved absent id",
    "delete": "named immutable audit fixtures retained by target contract unless the owner provides a delete",
    "ids_are_synthetic": true
  },
  "egress": "http://audit-core.audit-core.svc.cluster.local:8080",
  "routes": [
    "GET /readyz",
    "POST /v1/events",
    "GET /v1/events/{event_id}",
    "GET /v1/events?correlation_id={correlation_id}"
  ],
  "identities": {
    "count": 2,
    "role": "ordinary tenant-scoped may_read/may_write fixture senders",
    "ttl_seconds": 900,
    "broker_audience": "whitehat-e2/audit-core"
  },
  "abort_telemetry": [
    "p95_latency_ms",
    "probe_attributable_5xx",
    "unexpected_or_non_fixture_data",
    "missing_attribution"
  ]
}