coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record operator approval of WH-ENG-20260822-AUDIT-E2-01

Browse source 
Owner acknowledgement remains pending. Offline admission stays fail-closed.
No credentials requested and no packets sent.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 11:54:09 +02:00
parent 5082f86c61
commit 461554a749
10 changed files with 42 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

26
engagements/2026-08-22-audit-core-e2.md
View file

@ -1,13 +1,13 @@
# WH-ENG-20260822-AUDIT-E2-01 — proposal
# WH-ENG-20260822-AUDIT-E2-01
Status: **proposed**. This is not operator approval, not target-owner
acknowledgement, and not authorization to send a packet.
Status: **operator-approved, awaiting target-owner acknowledgement**.
This is not yet authorization to send a packet or project credentials.
Reserved by audit-core in `c45151e1-df1a-4306-a70a-83be7875f01c` after Mason
applied the foundational plane (`c26a6e5`). The cancelled ID
`WH-ENG-20260821-AUDIT-E2` remains terminal.
Operator approved `2026-08-22T09:52:55Z` in the coordinating session
(`operator-session-2026-08-22-e2-approval`). Audit-core acknowledgement is
still pending. The cancelled ID `WH-ENG-20260821-AUDIT-E2` remains terminal.
| Field | Proposed value |
| Field | Value |
| --- | --- |
| Target | `audit-core.audit-core.svc.cluster.local:8080` |
| Registration | `targets/audit-core-e2.json` (`applicable`, `live-e2`) |
@ -16,13 +16,11 @@ applied the foundational plane (`c26a6e5`). The cancelled ID
| Identities | two ordinary tenant-scoped `may_read`/`may_write` senders, `source=whitehat-security`, TTL ≤ 900s, mount-only |
| Routes | `GET /readyz`, `POST /v1/events`, `GET /v1/events/{event_id}`, `GET /v1/events?correlation_id=` |
| Ceiling | concurrency 1; 10/min; at most 30 requests |
| Window | 2026-08-22T18:00:00Z–18:15:00Z (refresh at approval if stale) |
| Window | 2026-08-22T18:00:00Z–18:15:00Z |
| Cleanup | revoke both leases; delete only named synthetic fixtures; prove cleanup |
| Reporting | `risk-nexus`, no severity |
Offline preflight (`validate-engagement`, `admit-plane`) must fail closed while
`status` is `proposed` and the live custody broker is unconnected. That
failure is the expected result, not a pass.
Do not apply `plane/runner-pod.yaml` against this ID until approval,
acknowledgement, and projected identities exist.
Offline preflight must fail closed until `target_owner_acknowledged_at` is
set. After acknowledgement, the live custody broker is still unconnected and
must fail closed until two identities are projected. Do not apply
`plane/runner-pod.yaml` before that.