coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit live E2 from a value-safe custody receipt

Browse source 
WH-ENG-20260822-AUDIT-E2-02 projected and then aborted: admit-plane had no
receipt adapter, so the runner sent zero packets. Consume custody receipts
as handles only, keep unconnected admission fail-closed, and retire -02.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 21:31:49 +02:00
parent b6c1806680
commit 45548e44a2
14 changed files with 221 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

4
engagements/2026-08-22-audit-core-e2-02.json
View file

@ -1,6 +1,8 @@
{
"engagement_id": "WH-ENG-20260822-AUDIT-E2-02",
"status": "approved",
"status": "aborted",
"aborted_at": "2026-08-22T19:21:39Z",
"abort_reason": "Attended projection succeeded at 19:17:54Z and the runner became Ready, but admit-plane failed closed: no live adapter consumed the value-safe custody receipt. Zero packets. Runner deleted 19:21:07Z; custody cleanup 19:21:39Z. Not E2 evidence. Identifier is terminal.",
"proposal_at": "2026-08-22T18:36:50Z",
"proposal_reason": "Fresh attended retry after WH-ENG-20260822-AUDIT-E2-01 expired with zero packets. The terminal identifier, identities and fixtures are not reused.",
"authorization_id": "operator-session-2026-08-22-e2-02-approval",

26
engagements/2026-08-22-audit-core-e2-02.md
View file

@ -1,21 +1,13 @@
# WH-ENG-20260822-AUDIT-E2-02
Status: **approved and waiting**. The engagement is fail-closed until
`2026-08-22T19:15:00Z` and until custody reports projection ready.
Status: **aborted**. Not E2 evidence.
| Gate | State |
| --- | --- |
| Operator approval | `2026-08-22T18:42:50Z` in the coordinating session |
| Owner acknowledgement | `2026-08-22T18:45:39Z` after direct artifact review |
| Foundational plane | applied by ops-mason `c26a6e5` |
| Window | `2026-08-22T19:15:00Z`–`19:30:00Z` |
| Image | `sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6` |
| Custody projection | pending; do not mint before 19:15Z |
| Runner pod | not applied |
| Packets | none |
Attended projection succeeded at `2026-08-22T19:17:54Z` and the runner pod
became Ready. Target validation, engagement validation and the kill switch
passed. `admit-plane` then failed closed because this repository had no
adapter for a value-safe custody receipt. The runner was never invoked.
Zero packets. Runner deleted `19:21:07Z`; custody cleanup `19:21:39Z`.
Identifier is terminal.
Offline preflight must fail closed before the window and until the live custody
broker confirms the two exact mounted identities.
Invocation, including required `--forged-event whitehat-e2-forged-b-20260822-02`:
`engagements/runtime/WH-ENG-20260822-AUDIT-E2-02-invocation.md`.
The fix is `admit-plane --receipt <projection-receipt.json>`, which issues a
plane lease from handles only.

6
engagements/README.md
View file

@ -14,6 +14,8 @@ from `whitehat admit-plane`. `WH-ENG-20260821-AUDIT-E2` and
`WH-ENG-20260821-TENANT-E2` are cancelled and must not be reused. The pod
manifest under `runtime/` is bound to a cancelled ID and must not be applied.
`WH-ENG-20260822-AUDIT-E2-01` expired at `2026-08-22T18:15:00Z` with no live
run. Do not reuse it. A later attempt needs a new identifier and window.
`WH-ENG-20260822-AUDIT-E2-01` expired unused. `WH-ENG-20260822-AUDIT-E2-02`
aborted after projection because `admit-plane` had no receipt adapter; zero
packets. Neither identifier may be reused. Live admission requires
`--receipt` of a value-safe custody projection.