coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add WHITEHAT-WP-0002 receipt example, CLI coverage, and abort records

Browse source 
Meantime polish while live E2 waits on a new trial. Example receipts carry
handles only. admit-plane --receipt is tested. Aborts can be queued without
being target assurance.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 21:40:33 +02:00
parent 45548e44a2
commit 481ed6add5
11 changed files with 247 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

3
evidence/README.md
View file

@ -3,7 +3,8 @@
This directory stores sanitized run artifacts. `offline-calibration.json` and
`offline-e3-calibration.json` are generated from repository-created fixtures
and prove only that the harness distinguishes known-good from known-bad
behavior. They are not target assurance.
behavior. They are not target assurance. `WH-ENG-20260822-AUDIT-E2-02-abort.json`
is an abort record (`evidence_class: abort`), not an E2 pass or finding.
Before committing target evidence, verify that it contains no response body,
credential, database URL, real tenant identifier, or real tenant value. A

23
evidence/WH-ENG-20260822-AUDIT-E2-02-abort.json Normal file
View file

@ -0,0 +1,23 @@
{
"schema_version": "whitehat-run/v1",
"run_id": "WH-ENG-20260822-AUDIT-E2-02-abort",
"evidence_class": "abort",
"engagement_id": "WH-ENG-20260822-AUDIT-E2-02",
"authorization_id": "operator-session-2026-08-22-e2-02-approval",
"target": "audit-core",
"target_revision": "sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6",
"posture_claim": "implemented E2; currently evidenced E1",
"attacker_model": "E2-authenticated-tenant-a",
"started_at": "2026-08-22T19:17:54Z",
"ended_at": "2026-08-22T19:21:39Z",
"outcome": "aborted",
"attempted_operations": 0,
"cleanup": "runner deleted 19:21:07Z; custody cleanup 19:21:39Z; no leftover Secret, KV paths, or identities",
"credential_revocation": "custody-owned; receipt broker does not hold credentials",
"probes": [],
"limitations": [
"admit-plane had no receipt adapter at run time; the runner was never invoked.",
"Zero packets were sent. This is not E2 evidence."
],
"assurance_statement": "Pass means only that the attacks attempted in this run did not work; it is not proof that the tenant boundary always holds."
}