coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

approve(WH-ENG-20260822-AUDIT-E2-01): record owner acknowledgement

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a025c2-407a-7a32-b40a-f37a52f03f62
This commit is contained in:
tegwick 2026-08-22 12:05:40 +02:00
parent 1418dac0de
commit 32afceb68e
2 changed files with 7 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
engagements/2026-08-22-audit-core-e2.json
View file

@ -1,6 +1,6 @@
{
"engagement_id": "WH-ENG-20260822-AUDIT-E2-01",
"status": "awaiting-owner-acknowledgement",
"status": "approved",
"proposal_at": "2026-08-22T09:44:00Z",
"proposal_reason": "Fresh live-e2 proposal after foundational plane apply. Do not reuse WH-ENG-20260821-AUDIT-E2.",
"authorization_id": "operator-session-2026-08-22-e2-approval",
@ -10,8 +10,8 @@
"target": "http://audit-core.audit-core.svc.cluster.local:8080",
"target_id": "audit-core",
"target_owner": "audit-core / infrastructure operator",
"target_owner_acknowledged_at": null,
"target_owner_acknowledgement_status": "pending; operator approved 2026-08-22T09:52:55Z",
"target_owner_acknowledged_at": "2026-08-22T10:04:56Z",
"target_owner_acknowledgement_status": "audit-core accepted the bounded routes, declared fixtures, two expiring tenant-scoped identities, target revision, window, abort thresholds, and cleanup obligation after review at whitehat-security 1418dac and audit-core abd22fa/fa6665f",
"environment": "production",
"production_approval": "Explicit operator approval of WH-ENG-20260822-AUDIT-E2-01 in the coordinating session on 2026-08-22",
"approval_class": "live-e2",

8
tests/test_cli.py
View file

@ -24,16 +24,16 @@ def test_kill_switch_is_clear_by_default(capsys):
assert capsys.readouterr().out.strip() == "clear"
def test_validate_engagement_refuses_unacknowledged_record(capsys):
def test_validate_engagement_refuses_before_window(capsys):
with pytest.raises(SystemExit) as stopped:
main(["validate-engagement", "engagements/2026-08-22-audit-core-e2.json"])
assert stopped.value.code == 2
err = capsys.readouterr().err
assert err.startswith("not authorized:")
assert "acknowledgement is pending" in err
assert "engagement window has not started" in err
def test_admit_plane_refuses_unacknowledged_record(capsys):
def test_admit_plane_refuses_before_window(capsys):
with pytest.raises(SystemExit) as stopped:
main([
"admit-plane",
@ -43,7 +43,7 @@ def test_admit_plane_refuses_unacknowledged_record(capsys):
assert stopped.value.code == 2
err = capsys.readouterr().err
assert "not authorized:" in err
assert "acknowledgement is pending" in err
assert "engagement window has not started" in err
def test_admit_plane_refuses_cancelled_engagement(capsys):