coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(workplans): adopt ADR-007 derived identifiers

Browse source 
Refs CUST-WP-0068-T06

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 2583210@bnt-lap001
Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
This commit is contained in:
codex 2026-08-25 19:27:52 +02:00
parent 72fbc4ee4e
commit 342cac3cb9
1 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

18
workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md
View file

@ -9,7 +9,7 @@ owner: net-kingdom
topic_slug: whitehat-security
created: "2026-08-17"
updated: "2026-08-23"
state_hub_workstream_id: "ecc16edc-9f9b-4fc4-8fb1-96b947a59299"
state_hub_workstream_id: "3049aa1e-b188-514f-9ad7-bf3026094fb9"
---
# WHITEHAT-WP-0001 — cross-tenant evidence
@ -82,7 +82,7 @@ As above. Gates everything.
id: WHITEHAT-WP-0001-T01
status: done
priority: high
state_hub_task_id: "0d28fd14-1b82-4ac1-907b-02f43e8baae8"
state_hub_task_id: "13c2feb1-e9ce-5ec5-8887-729541351429"
```
Drafted in `docs/rules-of-engagement.md` on 2026-08-18 with authorization
@ -100,7 +100,7 @@ pre-authorize any live target.
id: WHITEHAT-WP-0001-T02
status: done
priority: high
state_hub_task_id: "e0070ee6-6060-4a29-bd88-f664034db28e"
state_hub_task_id: "b467057d-3c1e-5580-b5c8-1b821a1322ef"
```
What the adversary is assumed to hold, so a probe is judged against a threat
@ -129,7 +129,7 @@ failure.
id: WHITEHAT-WP-0001-T03
status: done
priority: high
state_hub_task_id: "742561f1-97b6-4fcc-8e06-d18508ddecae"
state_hub_task_id: "e03edc76-a314-50dc-8625-3666c6351818"
```
The core technique: run the same request as two tenants and compare.
@ -164,7 +164,7 @@ review or replacement at 2026-08-23T22:10:25Z.
id: WHITEHAT-WP-0001-T04
status: done
priority: high
state_hub_task_id: "a2afc0f5-3ece-410c-864c-829a8aac30fc"
state_hub_task_id: "3956bdad-14cd-5b60-91b5-9a27ac4ab745"
```
A probe that has only ever passed is not evidence.
@ -191,7 +191,7 @@ new admitted engagement runs.
id: WHITEHAT-WP-0001-T05
status: progress
priority: medium
state_hub_task_id: "6df676e7-bed5-4291-a128-eb6e9844edf2"
state_hub_task_id: "7c2c3dab-a135-543b-86b1-d543ec6af0fc"
```
`rapp-postgres` ADR-0003 supplies an `rls_conformance` view and a template, and
@ -225,7 +225,7 @@ reviewed runtime-safe surface, named database, and window.
id: WHITEHAT-WP-0001-T06
status: progress
priority: medium
state_hub_task_id: "99254ab5-f08e-44c7-8399-be706dc03019"
state_hub_task_id: "3a2d7a31-86b9-5c82-ab88-606b64381b2a"
```
The framework had to reword this artifact once already: its first draft
@ -254,7 +254,7 @@ window and aggressor ceiling do not yet exist.
id: WHITEHAT-WP-0001-T07
status: done
priority: medium
state_hub_task_id: "54f33288-5361-4b20-8e1f-168866d64644"
state_hub_task_id: "602d0f23-8406-5882-8f93-ec90151dd475"
```
Findings leave this repo in one direction. A run produces: what was attempted,
@ -282,7 +282,7 @@ resume later without assembling authority during the run.
id: WHITEHAT-WP-0001-T08
status: done
priority: high
state_hub_task_id: "965ab027-efde-48b7-bb13-84dd308b909d"
state_hub_task_id: "98b818b2-30d5-584f-8c04-ead58136dcb5"
```
Completed 2026-08-22 as a repository contract, not a cluster provision: