Add governed test plane and close T04/T08

Encode fail-closed admission, target registrations, and a credential
broker that never returns secret values. Calibrate audit-core shaped
probes in-process. Send no packets and request no live credentials.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 00:44:21 +02:00
parent 0aab0cb4c6
commit 95129d7a35
35 changed files with 1599 additions and 103 deletions

View file

@ -0,0 +1,4 @@
The `audit-core-e2-pod.yaml` manifest is bound to cancelled engagement
`WH-ENG-20260821-AUDIT-E2`. Do not apply it. New live runs use
`plane/runner-pod.yaml` with a new unretired engagement ID after the plane
exists.