Add in-process known-bad fixtures for remaining ASM T-01–T-10

Each Canon test now has a fixture-asm registration that fails known-bad
and passes known-good in-process. Live asm-tNN targets stay pending.
No network, OpenBao, or packet.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9

targets/fixture-asm-t10.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": "whitehat-target/v1",
+  "target_id": "fixture-asm-t10",
+  "posture_claim": "ASM T-10",
+  "attacker_model": "reuse of a revoked test credential through every originally valid path",
+  "applicability": "applicable",
+  "applicability_reason": "In-process T-10 revocation evaluator. Known-bad leaves the broker path unrevoked. No live issuer.",
+  "approval_classes": [
+    "fixture-asm"
+  ],
+  "specification": "asm-assurance-targets.v1",
+  "test_id": "T-10",
+  "title": "Revocation Closure Test",
+  "claims": [
+    "INV-09",
+    "A-07",
+    "A-08"
+  ],
+  "oracle": "revoked-credential-reuse-fails-within-visibility-bound",
+  "adapter": "src/whitehat_security/asm.py",
+  "probe_pack": "src/whitehat_security/asm.py",
+  "known_bad_calibration": "src/whitehat_security/asm.py",
+  "fixture_lifecycle": {
+    "create": "in-process constructor",
+    "delete": "drop process state",
+    "ids_are_synthetic": true
+  },
+  "egress": "in-process",
+  "surface": [
+    "in-process-revocation"
+  ],
+  "result_route": {
+    "conformance": "gate-house",
+    "implementation_finding": "risk-nexus",
+    "specification_finding": "gate-house",
+    "harness_gap": "whitehat-security"
+  },
+  "routes": [
+    "t10-all-paths-closed",
+    "t10-unrevoked-path"
+  ],
+  "identities": {
+    "count": 0,
+    "role": "none; fixture generates no live identity",
+    "broker_audience": "whitehat-asm/fixture-t-10"
+  },
+  "abort_telemetry": [
+    "kill_switch",
+    "unrevoked_path"
+  ]
+}