coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add governed test plane and close T04/T08

Browse source 
Encode fail-closed admission, target registrations, and a credential
broker that never returns secret values. Calibrate audit-core shaped
probes in-process. Send no packets and request no live credentials.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 00:44:21 +02:00
parent 0aab0cb4c6
commit 95129d7a35
35 changed files with 1599 additions and 103 deletions
Download patch file Download diff file Expand all files Collapse all files

22
targets/flex-auth-e2.json Normal file
View file

@ -0,0 +1,22 @@
{
"schema_version": "whitehat-target/v1",
"target_id": "flex-auth",
"posture_claim": "E2",
"attacker_model": "E2-authenticated-tenant-a",
"applicability": "pending",
"applicability_reason": "Named in the initial envelope. No target-owner confirmation yet that a relationship-inheritance decision can be exercised as tenant A without tenant B authority.",
"approval_classes": ["live-e2"],
"routes": [],
"identities": {
"count": 2,
"role": "ordinary tenant-scoped decision subject; unconfirmed",
"ttl_seconds": 900,
"broker_audience": "whitehat-e2/flex-auth"
},
"abort_telemetry": [
"p95_latency_ms",
"probe_attributable_5xx",
"unexpected_or_non_fixture_data",
"missing_attribution"
]
}