coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic

Browse source 
Align plane ordering with Mason's apply, record the fresh audit-core
engagement as proposed, and keep offline admission fail-closed until
operator approval and owner acknowledgement exist.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 11:46:58 +02:00
parent 7e83a66573
commit 5082f86c61
12 changed files with 176 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

9
workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md
View file

@ -158,10 +158,11 @@ inventories live in `probe-packs/`. Target honesty lives in `targets/`:
artifact, not a deferral); `flex-auth` is pending.
The 2026-08-21 production engagement IDs were cancelled without sending a
target request and are retired. A live audit-core run still needs a **new**
engagement, target-owner acknowledgement, provisioned `whitehat` namespace,
and a connected custody broker. Whitehat will not relabel tenant-engine to
finish this task.
target request and are retired. ops-mason applied the foundational plane on
2026-08-22. `WH-ENG-20260822-AUDIT-E2-01` is a **proposed** live-e2 record
for audit-core: operator approval, owner acknowledgement and the custody
broker remain pending. Offline preflight must fail closed. Whitehat will not
relabel tenant-engine to finish this task.
### T04 — Prove the probes fail