coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Finish WHITEHAT-WP-0001 and own live residuals in WP-0006

Browse source 
Close T05 and T06 on the same applicable-target rule as T03: E3 cadence
and in-process calibration, platform-pg not_applicable, P1/P2 evaluator
proven against known-good and known-bad samples. Persist offline capacity
calibration. Live E3, P1/P2, flex-auth E2, and a later audit-core run
move to WHITEHAT-WP-0006, which authorizes no packet.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
This commit is contained in:
tegwick 2026-09-01 20:26:47 +02:00
parent 69e03efd7f
commit 43327183d8
13 changed files with 355 additions and 73 deletions
Download patch file Download diff file Expand all files Collapse all files

9
evidence/README.md
View file

@ -1,9 +1,10 @@
# Evidence
This directory stores sanitized run artifacts. `offline-calibration.json` and
`offline-e3-calibration.json` are generated from repository-created fixtures
and prove only that the harness distinguishes known-good from known-bad
behavior. They are not target assurance. `WH-ENG-20260822-AUDIT-E2-02-abort.json`
This directory stores sanitized run artifacts. `offline-calibration.json`,
`offline-e3-calibration.json` and `offline-capacity-calibration.json` are
generated from repository-created fixtures and prove only that the harness
distinguishes known-good from known-bad behavior. They are not target
assurance. `WH-ENG-20260822-AUDIT-E2-02-abort.json`
is an abort record (`evidence_class: abort`), not an E2 pass or finding.
`WH-ENG-20260822-AUDIT-E2-03.json` is the first authorized target pass; SHA-256
`2d5a21141b78024a5334881e2b7fd62a69c46931057f77515a6c6f18ec497593`. A pass

98
evidence/offline-capacity-calibration.json Normal file
View file

@ -0,0 +1,98 @@
{
"ended_at": "2026-09-01T18:25:59.344646Z",
"evidence_class": "fixture",
"known_bad": [
{
"aggressor_ceiling": 10,
"aggressor_peak": 10,
"case": "unbound_governor",
"governor_bound": false,
"neighbour_degradation": {
"aggressor": {
"error_rate_increase_points": 0.01,
"latency_increase_percent": 150.0,
"throughput_decrease_percent": -20.0
},
"neighbour": {
"error_rate_increase_points": 0.02,
"latency_increase_percent": 50.0,
"throughput_decrease_percent": 25.0
}
},
"outcome": "finding",
"reasons": [
"declared governor did not bind"
]
},
{
"aggressor_ceiling": 10,
"aggressor_peak": 11,
"case": "exceeded_ceiling",
"governor_bound": true,
"neighbour_degradation": {
"aggressor": {
"error_rate_increase_points": 0.01,
"latency_increase_percent": 150.0,
"throughput_decrease_percent": -20.0
},
"neighbour": {
"error_rate_increase_points": 0.02,
"latency_increase_percent": 50.0,
"throughput_decrease_percent": 25.0
}
},
"outcome": "aborted",
"reasons": [
"probe exceeded its authorized allowance"
]
},
{
"aggressor_ceiling": 10,
"aggressor_peak": 10,
"case": "missing_neighbour",
"governor_bound": true,
"neighbour_degradation": {
"aggressor": {
"error_rate_increase_points": 0.01,
"latency_increase_percent": 150.0,
"throughput_decrease_percent": -20.0
}
},
"outcome": "finding",
"reasons": [
"loaded samples missing consumers: neighbour"
]
}
],
"known_good": [
{
"aggressor_ceiling": 10,
"aggressor_peak": 10,
"case": "governor_bound_within_ceiling",
"governor_bound": true,
"neighbour_degradation": {
"aggressor": {
"error_rate_increase_points": 0.01,
"latency_increase_percent": 150.0,
"throughput_decrease_percent": -20.0
},
"neighbour": {
"error_rate_increase_points": 0.02,
"latency_increase_percent": 50.0,
"throughput_decrease_percent": 25.0
}
},
"outcome": "pass",
"reasons": []
}
],
"limitations": [
"Offline capacity calibration evaluates the harness; it is not target assurance.",
"No network load, database connection, or live credential was used.",
"Zero neighbour degradation is not an expected assertion on shared infrastructure."
],
"outcome": "pass",
"run_id": "capacity-calibration-2026-09-01T18:25:59.344503Z",
"schema_version": "whitehat-capacity-calibration/v1",
"started_at": "2026-09-01T18:25:59.344503Z"
}