From 32afceb68ed0bf8a49fbf2e718189ac864275a21 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 22 Aug 2026 12:05:40 +0200 Subject: [PATCH] approve(WH-ENG-20260822-AUDIT-E2-01): record owner acknowledgement Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a025c2-407a-7a32-b40a-f37a52f03f62 --- engagements/2026-08-22-audit-core-e2.json | 6 +++--- tests/test_cli.py | 8 ++++---- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/engagements/2026-08-22-audit-core-e2.json b/engagements/2026-08-22-audit-core-e2.json index 83021a9..060abac 100644 --- a/engagements/2026-08-22-audit-core-e2.json +++ b/engagements/2026-08-22-audit-core-e2.json @@ -1,6 +1,6 @@ { "engagement_id": "WH-ENG-20260822-AUDIT-E2-01", - "status": "awaiting-owner-acknowledgement", + "status": "approved", "proposal_at": "2026-08-22T09:44:00Z", "proposal_reason": "Fresh live-e2 proposal after foundational plane apply. Do not reuse WH-ENG-20260821-AUDIT-E2.", "authorization_id": "operator-session-2026-08-22-e2-approval", @@ -10,8 +10,8 @@ "target": "http://audit-core.audit-core.svc.cluster.local:8080", "target_id": "audit-core", "target_owner": "audit-core / infrastructure operator", - "target_owner_acknowledged_at": null, - "target_owner_acknowledgement_status": "pending; operator approved 2026-08-22T09:52:55Z", + "target_owner_acknowledged_at": "2026-08-22T10:04:56Z", + "target_owner_acknowledgement_status": "audit-core accepted the bounded routes, declared fixtures, two expiring tenant-scoped identities, target revision, window, abort thresholds, and cleanup obligation after review at whitehat-security 1418dac and audit-core abd22fa/fa6665f", "environment": "production", "production_approval": "Explicit operator approval of WH-ENG-20260822-AUDIT-E2-01 in the coordinating session on 2026-08-22", "approval_class": "live-e2", diff --git a/tests/test_cli.py b/tests/test_cli.py index c9c86d5..af740cb 100644 --- a/tests/test_cli.py +++ b/tests/test_cli.py @@ -24,16 +24,16 @@ def test_kill_switch_is_clear_by_default(capsys): assert capsys.readouterr().out.strip() == "clear" -def test_validate_engagement_refuses_unacknowledged_record(capsys): +def test_validate_engagement_refuses_before_window(capsys): with pytest.raises(SystemExit) as stopped: main(["validate-engagement", "engagements/2026-08-22-audit-core-e2.json"]) assert stopped.value.code == 2 err = capsys.readouterr().err assert err.startswith("not authorized:") - assert "acknowledgement is pending" in err + assert "engagement window has not started" in err -def test_admit_plane_refuses_unacknowledged_record(capsys): +def test_admit_plane_refuses_before_window(capsys): with pytest.raises(SystemExit) as stopped: main([ "admit-plane", @@ -43,7 +43,7 @@ def test_admit_plane_refuses_unacknowledged_record(capsys): assert stopped.value.code == 2 err = capsys.readouterr().err assert "not authorized:" in err - assert "acknowledgement is pending" in err + assert "engagement window has not started" in err def test_admit_plane_refuses_cancelled_engagement(capsys):