diff --git a/SCOPE.md b/SCOPE.md index 8632f98..932e3cd 100644 --- a/SCOPE.md +++ b/SCOPE.md @@ -70,11 +70,12 @@ boundary always holds. - Finished: `WHITEHAT-WP-0001` through `WHITEHAT-WP-0005` and `WHITEHAT-WP-0007`. Residual live Tenancy Posture evidence is `WHITEHAT-WP-0006`. Residual live ASM is `WHITEHAT-WP-0008`. Both stay - `blocked` after the 2026-10-04 recheck. T01 waits on `rapp-postgres` for - an ordinary runtime identity. T02 waits on an operator substrate window. - T03 waits on `access-engine` or a new `audit-core` engagement ID. Live ASM - waits on a surface owner, with T-06 on `approval-engine` and a consuming - PEP. No packet is authorized. + `blocked` after the 2026-10-04 recheck and the owner returns the same day. + T01 still waits on `rapp-postgres` for an ordinary runtime identity. T02 + still waits on an operator substrate window. T03 still waits on + `access-engine` or a new `audit-core` engagement ID. Live ASM still waits + on a surface owner, with T-06 on `approval-engine` and a consuming PEP. + No packet is authorized. - `WHITEHAT-WP-0007` triaged Gate House ASM T-01…T-10. Live `asm-tNN` registrations remain `pending`. In-process `fixture-asm-t01`…`t10` calibrations exist. That work authorized no live probe. @@ -97,8 +98,10 @@ boundary always holds. digest `8d1d6a9d`, commit `f65d0e64`, from offline probes and the recorded 28-case corpus. It finds no unsafe effect and both named RISK-F-0015 routes on the fixture tokens. It does not close that finding, accept - EMERGENT-WP-0002-T07, or re-pin `informed-decision`. It authorizes no - packet. + EMERGENT-WP-0002-T07, or re-pin `informed-decision`. On 2026-10-04 + `emergent-security` commit `9f4530b` accepted only that bounded review + gate, and `risk-nexus` commit `e1f006b` recorded the observation. + RISK-F-0015 stays open. It authorizes no packet. ## Relationships diff --git a/workplans/WHITEHAT-WP-0006-authorized-live-residuals.md b/workplans/WHITEHAT-WP-0006-authorized-live-residuals.md index d4e6fa6..4b68ff7 100644 --- a/workplans/WHITEHAT-WP-0006-authorized-live-residuals.md +++ b/workplans/WHITEHAT-WP-0006-authorized-live-residuals.md @@ -107,8 +107,23 @@ Nothing local can proceed. The tasks stay `wait` and this plan stays `audit-core` approves a new engagement ID. The August 22 audit-core IDs stay terminal. -Unread requirement messages: `rapp-postgres` +Requirement messages: `rapp-postgres` `2a69d02b-12f2-4cd6-b488-69979955aea0`, `the-custodian` `5b724153-fc30-4a57-871f-b891044872f0`, `access-engine` `bd8cf37e-80e8-4df9-9181-1441b31baa30`, `audit-core` `81bebdd8-5ca7-47b3-aafe-1d00ff8be122`. + +Owner returns the same day confirm the gaps. The tasks stay `wait`. + +- `rapp-postgres` `123b1b77-6a73-4e6c-bced-f0ab4631ebc5`: no ordinary runtime + identity has declared SELECT on `isolation_probe.rls_conformance` at + `11c1d489`. The migration role still holds that grant. No database + connection was opened. +- `the-custodian` `f2a82143-95a4-44db-ae51-474d7143c34e`: the substrate window + remains an operator record. No window was approved or drafted. +- `access-engine` `ec96e1ba-27bd-4faa-8773-55ffeaba095c`: no recorded flex-auth + tenant-A identity with no tenant-B authority at `257a83e9`. The target stays + pending. +- `audit-core` `14c8a0c6-815f-4e73-a6c6-c50d7d4d0af3`, commit `1149273`: the + August 22 engagement IDs stay terminal. No new engagement ID was minted and + no run was approved. diff --git a/workplans/WHITEHAT-WP-0008-live-asm-residuals.md b/workplans/WHITEHAT-WP-0008-live-asm-residuals.md index d090dcf..7ddee94 100644 --- a/workplans/WHITEHAT-WP-0008-live-asm-residuals.md +++ b/workplans/WHITEHAT-WP-0008-live-asm-residuals.md @@ -79,6 +79,14 @@ credential-lifecycle owner for T-10. `access-engine` is on the decision path for T-01, T-03, T-04, T-06, T-07, and T-08 and has not named a revision for any of them. -Unread requirement messages: `approval-engine` +Requirement messages: `approval-engine` `f3142b4c-aa3b-4fcc-9716-9dc1af85c2e8` and `access-engine` `bd8cf37e-80e8-4df9-9181-1441b31baa30`. + +Owner returns the same day name no live surface. T01 stays `wait`. + +- `approval-engine` `4ebf1784-36a5-43c0-8685-1a8cccf49006`: no complete named + consuming PEP for T-06 at `931e0b32`. `APPROVAL-WP-0002-T05` remains `wait`. + The secrets-engine client at `4b4d556` is still not that surface. +- `access-engine` `ec96e1ba-27bd-4faa-8773-55ffeaba095c`: ASM T-01, T-03, T-04, + T-06, T-07, and T-08 stay pending. The reply names no Canon registration. diff --git a/workplans/WHITEHAT-WP-0010-emergent-knowledge-026-disposition.md b/workplans/WHITEHAT-WP-0010-emergent-knowledge-026-disposition.md index 5abb145..00f22df 100644 --- a/workplans/WHITEHAT-WP-0010-emergent-knowledge-026-disposition.md +++ b/workplans/WHITEHAT-WP-0010-emergent-knowledge-026-disposition.md @@ -83,17 +83,18 @@ Hub delivery, both left unread for the recipients: WHITEHAT-WP-0006 and WHITEHAT-WP-0008 stay blocked. Nothing in this plan authorizes their live runs. -1. `emergent-security` EMERGENT-WP-0002-T07 stays `wait` until that - repository records whether this disposition meets its whitehat-review - gate for digest `8d1d6a9d` at `f65d0e64`. This delivery is not that - acceptance. Before anyone treats the launch-time 24-owner source check - as still true, reconcile `informed-decision` pin - `b4f637326ba3c2526f4648c4c90544948408d53f` with clean sibling HEAD - `b65363527e41a76140a3967fe5e84ef5fc2f190b`. The differing path is - `workplans/INFD-WP-0005-frictionless-decision-intake.md`. Do not re-pin - from this review. Source-validated startup stays withheld. -2. `risk-nexus` records the disposition against open RISK-F-0015. The two - named routes match the fixture in this corpus, and the 0.2.1 Claude - misses are not repeated. Closure remains T07's acceptance of complete - current-release provider evidence. The other route tokens are reported - with grading unset. Whitehat does not file a new finding for them. +1. `emergent-security` recorded the bounded review-gate return in commit + `9f4530b` and hub reply `aec90c8b-6222-4b9e-b212-150e142956ee`. That + accepts the Whitehat-owned offline review for digest `8d1d6a9d` at + `f65d0e64` only. EMERGENT-WP-0002-T07 stays `wait`. The exact Codex server + model is still absent, provider evidence was not inferred, and + source-validated startup stays withheld. The launch-time 24-owner source + check is not renewed. `informed-decision` pin + `b4f637326ba3c2526f4648c4c90544948408d53f` remains; clean sibling HEAD + `b65363527e41a76140a3967fe5e84ef5fc2f190b` differs in + `workplans/INFD-WP-0005-frictionless-decision-intake.md`. Do not re-pin. +2. `risk-nexus` recorded the observation on open RISK-F-0015 in commit + `e1f006b` and hub reply `049bffbc-68ab-4a53-96c7-74844391f155`. The finding + stays open and ungraded. Closure remains T07's acceptance of complete + current-release provider evidence. The other route tokens stay ungraded. + Whitehat does not file a new finding for them.