coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit fixture-asm for ASM T-06 and calibrate known-bad replay

Browse source 
Reassess the T-06 blocker against the secrets-engine consume client.
Gate House cited 3cd9955; approval_consume.py first appears at 4b4d556.
An in-process CAS disables different-digest conflict for known-bad and
drives consume_approval through a mock opener. No network or OpenBao.
Live asm-t06 stays pending.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
This commit is contained in:
tegwick 2026-09-02 10:10:53 +02:00
parent 75b79a0167
commit 75deaf073f
13 changed files with 424 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

5
SCOPE.md
View file

@ -70,8 +70,9 @@ boundary always holds.
- Finished: `WHITEHAT-WP-0001` through `WHITEHAT-WP-0005`. Residual live
Tenancy Posture evidence is owned by `WHITEHAT-WP-0006` and is blocked on
authorization.
- Active: `WHITEHAT-WP-0007` triages Gate House ASM T-01…T-10. All ten
registrations are `pending`. That work authorizes no probe.
- Active: `WHITEHAT-WP-0007` triages Gate House ASM T-01…T-10. Live
registrations remain `pending`. `fixture-asm-t06` is the first in-process
ASM calibration. That work authorizes no live probe.
- `WHITEHAT-WP-0001` T01–T08 are complete for every applicable target.
`audit-core` has dated E2 pass `WH-ENG-20260822-AUDIT-E2-03`.
`tenant-engine` E2 and `platform-pg` E3 stay `not_applicable`. `flex-auth`