coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

repo.work.create_intake WHITEHAT-IN-0002

Browse source 
correlation_id: e2ec3c78-24b6-4dcd-9057-52cd0d14cb20
reason: Start GH-WP-0001-T06 ASM target handoff as WHITEHAT-IN-0002
source: repo-manager

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
This commit is contained in:
repo-manager 2026-09-02 00:52:47 +02:00
parent dea2477492
commit 1a7697dd48
1 changed files with 38 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

38
intakes/intakes.md
View file

@ -50,3 +50,41 @@ closed_at: '2026-09-01T19:00:23.889023Z'
outcome: absorbed
state_hub_intake_id: 01a05e52-d5ed-7ad5-8573-f7a857a90b3b
```
## WHITEHAT-IN-0002 — Triage Gate House ASM T-01–T-10 executable targets
```yaml
id: WHITEHAT-IN-0002
kind: intake
title: Triage Gate House ASM T-01–T-10 executable targets
status: open
origin: cross-repo
origin_ref: gate-house GH-WP-0001-T06 / message 8229c9a4-862f-4d55-842c-5c95702f79d9
priority: high
owner: whitehat-security
requested_by: gate-house
source_message_id: 8229c9a4-862f-4d55-842c-5c95702f79d9
specification: asm-assurance-targets.v1
reporting_contract: conformance-reporting.v1
authorizes_probe: false
description: 'Gate House (GH-WP-0001-T06, commit 8cb7250) published executable ASM
assurance targets T-01 through T-10 and the conformance-reporting.v1 return contract.
Specs: gate-house/docs/assurance/asm-t01-t10-executable-targets.md, gate-house/docs/assurance/asm-targets.yaml,
gate-house/docs/contracts/conformance-reporting.md. This fulfills their side of
the T-01-T-10 split named in WHITEHAT-IN-0001: they specify the invariant; this
repository owns attack design, execution, and the verdict. REQUESTED: triage each
Canon test into this repository''s work structure — applicability, target surface,
known-bad calibration, and result route — preserving the Canon test id. Current
whitehat-target/v1 approval classes are E2, E3, and capacity, not ASM; mapping or
extending that schema is this repository''s decision. Acceptance, revision, rejection,
or split are all valid. This handoff authorizes no fixture, live probe, target,
credential, or packet. Every run remains under the rules of engagement and a dated
engagement. Outcomes return to gate-house under conformance-reporting.v1 with subject
[GH-CONFORMANCE] <test> <outcome> <target>@<revision>; implementation findings still
route through risk-nexus. Tests: T-01 Malicious Model; T-02 Credential Exfiltration;
T-03 Human Disconnect; T-04 Policy Self-Modification; T-05 Confused Deputy; T-06
Approval Replay; T-07 Circuit Breaker; T-08 Audit Reconstruction; T-09 Audit Failure;
T-10 Revocation Closure.'
created: '2026-09-01T22:52:47.291284Z'
updated: '2026-09-01T22:52:47.291284Z'
```