Add WHITEHAT-WP-0002 receipt example, CLI coverage, and abort records

Meantime polish while live E2 waits on a new trial. Example receipts carry
handles only. admit-plane --receipt is tested. Aborts can be queued without
being target assurance.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb

workplans/WHITEHAT-WP-0002-receipt-admission-and-abort-records.md

@@ -0,0 +1,65 @@
+---
+id: WHITEHAT-WP-0002
+type: workplan
+title: "Receipt admission example, CLI coverage, and abort records"
+domain: infotech
+repo: whitehat-security
+status: finished
+owner: net-kingdom
+topic_slug: whitehat-security
+created: "2026-08-22"
+updated: "2026-08-22"
+---
+
+# WHITEHAT-WP-0002 — receipt admission and abort records
+
+## Goal
+
+Close the gap that aborted `WH-ENG-20260822-AUDIT-E2-02`: operators need a
+checked-in value-safe receipt shape, a CLI path that issues a plane lease
+from it, and a way to record an abort without calling it target evidence.
+
+This plan does **not** authorize a live trial. The next E2 run remains a new
+engagement under WHITEHAT-WP-0001.
+
+## Tasks
+
+### T01 — Example projection receipt
+
+```task
+id: WHITEHAT-WP-0002-T01
+status: done
+priority: high
+```
+
+Checked-in example with no secret material, matching
+`schemas/projection-receipt.schema.json`. Operators copy it at window start
+instead of inventing a shape under the three-minute mint gate.
+
+### T02 — CLI coverage for `admit-plane --receipt`
+
+```task
+id: WHITEHAT-WP-0002-T02
+status: done
+priority: high
+```
+
+Prove the CLI admits from a valid receipt, refuses secret material, and still
+fails closed without `--receipt`.
+
+### T03 — Abort records are not target assurance
+
+```task
+id: WHITEHAT-WP-0002-T03
+status: done
+priority: medium
+```
+
+Allow `evidence_class: abort` so a zero-packet abort can be queued without
+being a Tenancy Posture artifact. Record `WH-ENG-20260822-AUDIT-E2-02` that
+way.
+
+## Sequencing
+
+T01 and T02 can proceed together. T03 is independent. None of this is a live
+run.