coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the audit-core E2-03 target pass and close T03/T07

Browse source 
Land the sanitized WH-ENG-20260822-AUDIT-E2-03 report, mark the
engagement completed and terminal, and close the applicable E2 harness
and risk-nexus delivery tasks. flex-auth stays pending; tenant-engine
stays not_applicable.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-23 00:42:31 +02:00
parent 5fcb3ec280
commit 3295b715c5
18 changed files with 293 additions and 72 deletions
Download patch file Download diff file Expand all files Collapse all files

65
workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md
View file

@ -8,7 +8,7 @@ status: active
owner: net-kingdom
topic_slug: whitehat-security
created: "2026-08-17"
updated: "2026-08-22"
updated: "2026-08-23"
state_hub_workstream_id: "ecc16edc-9f9b-4fc4-8fb1-96b947a59299"
---
@ -127,7 +127,7 @@ failure.
```task
id: WHITEHAT-WP-0001-T03
status: progress
status: done
priority: high
state_hub_task_id: "742561f1-97b6-4fcc-8e06-d18508ddecae"
```
@ -146,28 +146,17 @@ The core technique: run the same request as two tenants and compare.
**Acceptance:** a dated run record against every *applicable* E2 target. The
artifact is the run record, not a green tick. `tenant-engine` is registered
`not_applicable` for E2; that record is the artifact for that target.
`audit-core` remains the live E2 target and still needs a new admitted
engagement.
`flex-auth` remains `pending` and is not an applicable E2 target.
Implementation progress, 2026-08-22: `src/whitehat_security/differential.py`
performs owner/attacker/absent comparisons, detects fixture disclosure and
write-side state change, and persists only sanitized observations. Live entry
is `execute_authorized`, which requires a plane lease. Concrete route
inventories live in `probe-packs/`. Target honesty lives in `targets/`:
`audit-core` is applicable; `tenant-engine` is `not_applicable` (that is the
artifact, not a deferral); `flex-auth` is pending.
The 2026-08-21 production engagement IDs were cancelled without sending a
target request and are retired. ops-mason applied the foundational plane on
2026-08-22. The operator approved `WH-ENG-20260822-AUDIT-E2-01` at
2026-08-22T09:52:55Z; audit-core acknowledged at 2026-08-22T10:04:56Z
(`32afceb`) after the fixture/digest correction `1418dac`. Offline preflight
recorded a window that elapsed at 18:15Z with no projection-ready notice and
zero packets. `WH-ENG-20260822-AUDIT-E2-02` projected at 19:17:54Z and the
runner became Ready, then `admit-plane` failed closed because no receipt
adapter existed; zero packets, cleanup complete 19:21:39Z. Both identifiers
are terminal. Live admission now consumes a value-safe custody receipt.
Whitehat will not relabel tenant-engine to finish this task.
Done 2026-08-22: `WH-ENG-20260822-AUDIT-E2-03` is a dated target pass against
the only applicable live E2 target, `audit-core`. Ten operations, three
calibrated probes, cleanup before expiry, sanitized report in
`evidence/WH-ENG-20260822-AUDIT-E2-03.json`. `tenant-engine` stays
`not_applicable`; that record is the artifact, not a deferral. `-01` expired
unused and `-02` aborted with zero packets; those identifiers remain terminal.
Whitehat will not relabel pending or not-applicable targets to finish this
task. A later audit-core run needs a new engagement ID; this pass is due for
review or replacement at 2026-08-23T22:10:25Z.
### T04 — Prove the probes fail
@ -263,7 +252,7 @@ window and aggressor ceiling do not yet exist.
```task
id: WHITEHAT-WP-0001-T07
status: progress
status: done
priority: medium
state_hub_task_id: "54f33288-5361-4b20-8e1f-168866d64644"
```
@ -276,12 +265,13 @@ A **passing** run is also reported. "The attacks we thought of did not work" is
the honest claim, and recording it dated is what lets anyone see how stale the
assurance has become.
Implementation progress, 2026-08-22: `schemas/run-report.schema.json` defines
the minimized evidence contract, `whitehat risk-message` renders both pass
and finding deliveries without severity, and `whitehat deliver` queues a
target report to `outbox/`. Fixture calibration is refused as target
assurance. Completion awaits the first authorized target report being
delivered to `risk-nexus`.
Done 2026-08-22: `schemas/run-report.schema.json` defines the minimized
evidence contract, `whitehat risk-message` renders pass and finding
deliveries without severity, and `whitehat deliver` queues target reports.
The first authorized target report is
`evidence/WH-ENG-20260822-AUDIT-E2-03.json`, delivered to `risk-nexus` as
State Hub message `40e3f825-fc70-4091-96d2-9ab01d42184a`. Fixture calibration
remains refused as target assurance.
### T08 — Governed test plane
@ -319,15 +309,14 @@ gates live T03. T07 can follow T03.
## Session cutoff — 2026-08-22
The coordinating session ended with the workplan deliberately **active**. T01,
T02, T04 and T08 are done. T03, T05, T06 and T07 remain in progress. The two
dated production engagement records were cancelled without sending any target
request; cancelled engagement IDs are terminal and must never be reused.
T02, T03, T04, T07 and T08 are done. T05 and T06 remain in progress.
`WH-ENG-20260822-AUDIT-E2-01` expired unused, `-02` aborted with zero packets,
and `-03` completed as a bounded target pass. Those identifiers are terminal
and must never be reused. `flex-auth` is still pending; `platform-pg` E3 is
`not_applicable`; no P1/P2 live window exists.
The offline instrument is implemented, calibrated, and plane-gated. The
estate still has to provision the cluster plane and a value-safe credential
broker before any live evidence exists. Resume only with new engagement IDs.
The exact completed scope is recorded in `docs/session-cutoff-2026-08-22.md`
and `docs/test-plane.md`.
The exact earlier cutoff scope is recorded in
`docs/session-cutoff-2026-08-22.md` and `docs/test-plane.md`.
## Risks