Promote ASM T-01–T-10 into WHITEHAT-WP-0007 and triage each test

Extend whitehat-target/v1 with fixture-asm/asm instead of mapping onto
E2, E3, or capacity. Register all ten Canon tests as pending with named
blockers, known-bad designs, and result routes. Add a value-safe
conformance-message renderer. Authorizes no probe.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9

targets/asm-t09.json

@@ -0,0 +1,45 @@
+{
+  "schema_version": "whitehat-target/v1",
+  "target_id": "asm-t09",
+  "posture_claim": "ASM T-09",
+  "attacker_model": "disabling outbox insert, drain, or archive around privileged mutation and emergency revocation",
+  "applicability": "pending",
+  "applicability_reason": "Load-bearing evidence semantics are not declared by the owner. Disabling outbox or archive is outside standing live-e2 and needs its own engagement. Known-bad design: emit-after-commit (silent gap) and synchronous-archive-in-transaction (blocked revocation). This registration does not authorize a probe.",
+  "approval_classes": [
+    "asm"
+  ],
+  "specification": "asm-assurance-targets.v1",
+  "test_id": "T-09",
+  "title": "Audit Failure Test",
+  "claims": [
+    "INV-10",
+    "INV-12",
+    "A-12",
+    "A-13"
+  ],
+  "oracle": "declared-local-atomicity-and-outage-semantics-hold",
+  "surface": [
+    "state-owner",
+    "local-outbox",
+    "drain",
+    "audit-archive"
+  ],
+  "result_route": {
+    "conformance": "gate-house",
+    "implementation_finding": "risk-nexus",
+    "specification_finding": "gate-house",
+    "harness_gap": "whitehat-security"
+  },
+  "routes": [],
+  "identities": {
+    "count": 0,
+    "role": "none until the owning surface names a test identity",
+    "broker_audience": "whitehat-asm/t-09"
+  },
+  "abort_telemetry": [
+    "kill_switch",
+    "scope_boundary",
+    "missing_known_bad_calibration",
+    "secret_value_observed"
+  ]
+}