coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Promote ASM T-01–T-10 into WHITEHAT-WP-0007 and triage each test

Browse source 
Extend whitehat-target/v1 with fixture-asm/asm instead of mapping onto
E2, E3, or capacity. Register all ten Canon tests as pending with named
blockers, known-bad designs, and result routes. Add a value-safe
conformance-message renderer. Authorizes no probe.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
This commit is contained in:
tegwick 2026-09-02 01:11:16 +02:00
parent 44d6958b71
commit 5384f051d2
24 changed files with 850 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/reporting.md
View file

@ -24,6 +24,17 @@ Queue a target report without assigning severity:
PYTHONPATH=src python3 -m whitehat_security.cli deliver evidence/<run>.json --outbox outbox
```
Gate House ASM returns use a separate envelope. Render it with:
```sh
PYTHONPATH=src python3 -m whitehat_security.cli conformance-message evidence/<run>.json \
--spec asm-assurance-targets.v1 --test-id T-01 --component access-engine
```
That command does not send the message. Subject form:
`[GH-CONFORMANCE] <test> <outcome> <target>@<revision>`. Implementation
findings still go to `risk-nexus`.
Offline calibration stays in this repository and is plainly labeled
`evidence_class: fixture`; it is not sent as if it were a target result. The
deliver command refuses fixture evidence.