Admit E3 and capacity on the test plane

Register in-process E3 and capacity fixtures, keep live database and
substrate targets pending, and ask ops-mason for namespace-only provision.
No packets, no credentials, no cancelled engagement IDs.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb

targets/fixture-e3.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "whitehat-target/v1",
+  "target_id": "fixture-e3",
+  "posture_claim": "E3",
+  "attacker_model": "E3-A omitted-predicate accident; E3-B documented SQL-compromise limit",
+  "applicability": "applicable",
+  "applicability_reason": "In-process evaluator created by this repository. It uses one ordinary runtime identity and never grants BYPASSRLS or superuser.",
+  "approval_classes": ["fixture-e3"],
+  "adapter": "src/whitehat_security/e3.py",
+  "probe_pack": "src/whitehat_security/e3.py",
+  "known_bad_calibration": "src/whitehat_security/e3.py",
+  "fixture_lifecycle": {
+    "create": "in-process constructor",
+    "delete": "drop process state",
+    "ids_are_synthetic": true
+  },
+  "egress": "in-process",
+  "routes": [
+    "conformance",
+    "unset_guc",
+    "wrong_tenant_read",
+    "wrong_tenant_insert",
+    "runtime_bypassrls",
+    "unsafe_definer",
+    "reset_to_b"
+  ],
+  "identities": {
+    "count": 1,
+    "role": "ordinary runtime database role without BYPASSRLS",
+    "ttl_seconds": 900,
+    "broker_audience": "whitehat-e3/fixture"
+  },
+  "abort_telemetry": [
+    "statement_timeout",
+    "unexpected_or_non_fixture_data",
+    "missing_attribution",
+    "privilege_escalation"
+  ]
+}