coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic

Browse source 
Align plane ordering with Mason's apply, record the fresh audit-core
engagement as proposed, and keep offline admission fail-closed until
operator approval and owner acknowledgement exist.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 11:46:58 +02:00
parent 7e83a66573
commit 5082f86c61
12 changed files with 176 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

9
tests/test_engagement.py
View file

@ -63,6 +63,15 @@ def test_pending_owner_acknowledgement_fails_closed(tmp_path):
load(tmp_path, data)
def test_proposed_record_fails_closed_before_window_checks(tmp_path):
data = record()
data["status"] = "proposed"
data["approved_at"] = None
data["target_owner_acknowledged_at"] = None
with pytest.raises(AuthorizationError, match="proposed"):
load(tmp_path, data)
def test_cancelled_record_fails_closed_even_with_owner_acknowledgement(tmp_path):
data = record()
data["status"] = "cancelled"