coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add WHITEHAT-WP-0002 receipt example, CLI coverage, and abort records

Browse source 
Meantime polish while live E2 waits on a new trial. Example receipts carry
handles only. admit-plane --receipt is tested. Aborts can be queued without
being target assurance.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 21:40:33 +02:00
parent 45548e44a2
commit 481ed6add5
11 changed files with 247 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

15
tests/test_e3_capacity_reporting.py
View file

@ -48,3 +48,18 @@ def test_risk_message_contains_pass_and_no_severity():
assert "**pass**" in message
assert "Severity" not in message
assert "not proof" in message
def test_abort_message_is_not_target_assurance():
report = RunReport(
schema_version="whitehat-run/v1", run_id="abort-1", evidence_class="abort",
engagement_id="eng-1", authorization_id="auth-1", target="audit-core",
target_revision="abc", posture_claim="E2", attacker_model="E2",
started_at="2026-08-22T19:17:54Z", ended_at="2026-08-22T19:21:39Z",
outcome="aborted", attempted_operations=0, cleanup="complete",
credential_revocation="custody-owned",
)
message = risk_nexus_message(report)
assert "`abort`" in message
assert "not target assurance" in message
assert "Severity" not in message