coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit live E2 from a value-safe custody receipt

Browse source 
WH-ENG-20260822-AUDIT-E2-02 projected and then aborted: admit-plane had no
receipt adapter, so the runner sent zero packets. Consume custody receipts
as handles only, keep unconnected admission fail-closed, and retire -02.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 21:31:49 +02:00
parent b6c1806680
commit 45548e44a2
14 changed files with 221 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

26
engagements/2026-08-22-audit-core-e2-02.md
View file

@ -1,21 +1,13 @@
# WH-ENG-20260822-AUDIT-E2-02
Status: **approved and waiting**. The engagement is fail-closed until
`2026-08-22T19:15:00Z` and until custody reports projection ready.
Status: **aborted**. Not E2 evidence.
| Gate | State |
| --- | --- |
| Operator approval | `2026-08-22T18:42:50Z` in the coordinating session |
| Owner acknowledgement | `2026-08-22T18:45:39Z` after direct artifact review |
| Foundational plane | applied by ops-mason `c26a6e5` |
| Window | `2026-08-22T19:15:00Z`–`19:30:00Z` |
| Image | `sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6` |
| Custody projection | pending; do not mint before 19:15Z |
| Runner pod | not applied |
| Packets | none |
Attended projection succeeded at `2026-08-22T19:17:54Z` and the runner pod
became Ready. Target validation, engagement validation and the kill switch
passed. `admit-plane` then failed closed because this repository had no
adapter for a value-safe custody receipt. The runner was never invoked.
Zero packets. Runner deleted `19:21:07Z`; custody cleanup `19:21:39Z`.
Identifier is terminal.
Offline preflight must fail closed before the window and until the live custody
broker confirms the two exact mounted identities.
Invocation, including required `--forged-event whitehat-e2-forged-b-20260822-02`:
`engagements/runtime/WH-ENG-20260822-AUDIT-E2-02-invocation.md`.
The fix is `admit-plane --receipt <projection-receipt.json>`, which issues a
plane lease from handles only.