State the harness scope and calibrate E4 and R4 offline.

SCOPE.md now matches the commands that run. E4 and R4 fail known-bad fixtures in process, and the cadence register schedules nothing.

Assistant: grok
Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173

targets/fixture-e4.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "whitehat-target/v1",
+  "target_id": "fixture-e4",
+  "posture_claim": "E4",
+  "attacker_model": "leaked tenant-A credential presented to tenant-B substrate",
+  "applicability": "applicable",
+  "applicability_reason": "In-process evaluator created by this repository. It projects no credential and makes no network call. No live E4 target is registered.",
+  "approval_classes": ["fixture-e4"],
+  "adapter": "src/whitehat_security/e4.py",
+  "probe_pack": "src/whitehat_security/e4.py",
+  "known_bad_calibration": "src/whitehat_security/e4.py",
+  "fixture_lifecycle": {
+    "create": "in-process observations",
+    "delete": "drop process state",
+    "ids_are_synthetic": true
+  },
+  "egress": "in-process",
+  "routes": [
+    "other-substrate",
+    "alternate-database",
+    "alternate-schema",
+    "reachability",
+    "credential-refresh"
+  ],
+  "identities": {
+    "count": 0,
+    "role": "none; fixture projects no credential",
+    "broker_audience": "whitehat-e4/fixture"
+  },
+  "abort_telemetry": [
+    "credential_refresh_outside_authority",
+    "unexpected_credential_value",
+    "network_attempt"
+  ]
+}