coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Promote ASM T-01–T-10 into WHITEHAT-WP-0007 and triage each test

Browse source 
Extend whitehat-target/v1 with fixture-asm/asm instead of mapping onto
E2, E3, or capacity. Register all ten Canon tests as pending with named
blockers, known-bad designs, and result routes. Add a value-safe
conformance-message renderer. Authorizes no probe.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
This commit is contained in:
tegwick 2026-09-02 01:11:16 +02:00
parent 44d6958b71
commit 5384f051d2
24 changed files with 850 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

18
src/whitehat_security/cli.py
View file

@ -15,7 +15,7 @@ from .fixtures import FixtureService, probe_suite
from .model import RunReport, utc_now
from .plane import KillSwitch, admit, default_broker, retired_ids
from .platform_custody import broker_from_receipt, finalize_run_report
from .reporting import queue_risk_nexus, risk_nexus_message
from .reporting import conformance_message, queue_risk_nexus, risk_nexus_message
from .targets import load_catalog, load_registration
@ -104,6 +104,14 @@ def main(argv: list[str] | None = None) -> None:
capacity_fix.add_argument("--output")
message = commands.add_parser("risk-message")
message.add_argument("report")
conformance = commands.add_parser(
"conformance-message", help="render a Gate House conformance envelope"
)
conformance.add_argument("report")
conformance.add_argument("--spec", required=True)
conformance.add_argument("--test-id", required=True)
conformance.add_argument("--component")
conformance.add_argument("--invariants", default="")
args = parser.parse_args(argv)
if args.command == "fixtures":
@ -219,6 +227,14 @@ def main(argv: list[str] | None = None) -> None:
report = RunReport(**json.loads(Path(args.report).read_text(encoding="utf-8")))
print(risk_nexus_message(report), end="")
return
if args.command == "conformance-message":
report = RunReport(**json.loads(Path(args.report).read_text(encoding="utf-8")))
invariants = [item for item in args.invariants.split(",") if item]
print(conformance_message(
report, specification=args.spec, test_id=args.test_id,
component=args.component, invariant_ids=invariants or None,
), end="")
return
raise SystemExit(2)