Add governed test plane and close T04/T08

Encode fail-closed admission, target registrations, and a credential
broker that never returns secret values. Calibrate audit-core shaped
probes in-process. Send no packets and request no live credentials.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 00:44:21 +02:00
parent 0aab0cb4c6
commit 95129d7a35
35 changed files with 1599 additions and 103 deletions

View file

@ -76,3 +76,10 @@ each run:
Resume only with new engagement IDs after that plane can issue the correct test
identities and enforce the complete envelope. The existing workplan remains the
backlog: T01 and T02 are done; T03, T04, T05, T06, and T07 remain in progress.
## Progress after cutoff
On 2026-08-22 the plane contract was encoded in this repository:
[`docs/test-plane.md`](test-plane.md), `targets/`, `plane/`, and
`whitehat_security.plane`. No live packet was sent. No credential was
requested. Cancelled engagement IDs remain terminal.