Admit fixture-asm for ASM T-06 and calibrate known-bad replay

Reassess the T-06 blocker against the secrets-engine consume client.
Gate House cited 3cd9955; approval_consume.py first appears at 4b4d556.
An in-process CAS disables different-digest conflict for known-bad and
drives consume_approval through a mock opener. No network or OpenBao.
Live asm-t06 stays pending.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9

targets/fixture-asm-t06.json

@@ -0,0 +1,44 @@
+{
+  "schema_version": "whitehat-target/v1",
+  "target_id": "fixture-asm-t06",
+  "posture_claim": "ASM T-06",
+  "attacker_model": "replay, mutation, race, or post-revocation reuse of a bound approval",
+  "applicability": "applicable",
+  "applicability_reason": "In-process T-06 evaluator owned by this repository. It drives secrets-engine.approval_consume through a mock HTTP opener and an in-process CAS. Known-bad disables different-digest conflict. No network, OpenBao, or live approval-engine.",
+  "approval_classes": ["fixture-asm"],
+  "specification": "asm-assurance-targets.v1",
+  "test_id": "T-06",
+  "title": "Approval Replay Test",
+  "claims": ["A-04", "A-07", "A-13", "A-15"],
+  "oracle": "only-live-exactly-bound-unconsumed-request-succeeds",
+  "adapter": "src/whitehat_security/asm.py",
+  "probe_pack": "src/whitehat_security/asm.py",
+  "known_bad_calibration": "src/whitehat_security/asm.py",
+  "fixture_lifecycle": {
+    "create": "in-process CAS and temporary 0600 synthetic token file",
+    "delete": "drop process state and unlink token file",
+    "ids_are_synthetic": true
+  },
+  "egress": "in-process",
+  "surface": ["in-process-cas", "secrets-engine.approval_consume"],
+  "result_route": {
+    "conformance": "gate-house",
+    "implementation_finding": "risk-nexus",
+    "specification_finding": "gate-house",
+    "harness_gap": "whitehat-security"
+  },
+  "routes": [
+    "t06-exact-consume",
+    "t06-different-digest-replay"
+  ],
+  "identities": {
+    "count": 0,
+    "role": "none; fixture generates no live identity",
+    "broker_audience": "whitehat-asm/fixture-t06"
+  },
+  "abort_telemetry": [
+    "kill_switch",
+    "secret_value_observed",
+    "openbao_called_on_conflict"
+  ]
+}