coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic

Browse source 
Align plane ordering with Mason's apply, record the fresh audit-core
engagement as proposed, and keep offline admission fail-closed until
operator approval and owner acknowledgement exist.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 11:46:58 +02:00
parent 7e83a66573
commit 5082f86c61
12 changed files with 176 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

4
SCOPE.md
View file

@ -71,7 +71,9 @@ boundary always holds.
`docs/attacker-model.md`.
- `T03` is in progress: the differential core, audit-core adapter and test
plane admission exist. `tenant-engine` is registered `not_applicable` for
E2. Live audit-core still needs a new engagement and a provisioned plane.
E2. The foundational plane is applied. `WH-ENG-20260822-AUDIT-E2-01` is
proposed; live audit-core still needs approval, owner acknowledgement and
a connected custody broker.
- `T04` is complete for every applicable E2 probe: generic and audit-core
shaped fixtures fail known-bad and pass known-good in-process.
- `T05` is in progress: 24-hour cadence, offline evaluator and in-process