coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add in-process known-bad fixtures for remaining ASM T-01–T-10

Browse source 
Each Canon test now has a fixture-asm registration that fails known-bad
and passes known-good in-process. Live asm-tNN targets stay pending.
No network, OpenBao, or packet.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
This commit is contained in:
tegwick 2026-09-02 13:05:42 +02:00
parent 75deaf073f
commit 6f1ca0bfef
38 changed files with 1132 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

2
targets/asm-t09.json
View file

@ -4,7 +4,7 @@
"posture_claim": "ASM T-09",
"attacker_model": "disabling outbox insert, drain, or archive around privileged mutation and emergency revocation",
"applicability": "pending",
"applicability_reason": "Load-bearing evidence semantics are not declared by the owner. Disabling outbox or archive is outside standing live-e2 and needs its own engagement. Known-bad design: emit-after-commit (silent gap) and synchronous-archive-in-transaction (blocked revocation). This registration does not authorize a probe.",
"applicability_reason": "In-process known-bad calibration exists as fixture-asm-t09. Live run still needs a named surface, identities, and dated engagement. This live registration does not authorize a probe.",
"approval_classes": [
"asm"
],