coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record railiance-platform 18:00Z-18:03Z projection gate

Browse source 
Hold the runner until that attended project succeeds. No mint and no packets.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 15:03:03 +02:00
parent b8facab717
commit da98590d2a
1 changed files with 21 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

27
engagements/runtime/WH-ENG-20260822-AUDIT-E2-01-invocation.md
View file

@ -11,18 +11,33 @@ is unconnected.
## Custody projection (railiance-platform) ## Custody projection (railiance-platform)
Schedule, do not mint early: Procedure is implemented at railiance-platform `864cc20`
(`docs/audit-core-whitehat-e2-credential-projection.md`). `project` is
hard-gated to **18:00Z–18:03Z**. Cleanup must finish before 18:15Z. No mint
before the gate.
| Handle | Binding | | Handle | Binding |
| --- | --- | | --- | --- |
| token-a | `source=whitehat-security`, tenant `tenant:trial:whitehat-a-20260822`, `may_read=true`, `may_write=true` | | token-a | `source=whitehat-security`, tenant `tenant:trial:whitehat-a-20260822`, `may_read=true`, `may_write=true` |
| token-b | `source=whitehat-security`, tenant `tenant:trial:whitehat-b-20260822`, `may_read=true`, `may_write=true` | | token-b | `source=whitehat-security`, tenant `tenant:trial:whitehat-b-20260822`, `may_read=true`, `may_write=true` |
- Secret name `whitehat/whitehat-e2-audit-credentials` (namespace `whitehat`) Attended commands, from railiance-platform, after 18:00Z and no later than 18:03Z:
- Keys `token-a`, `token-b` only; never the full sender registry
- Issue at `2026-08-22T18:00:00Z`, `expires_at` `2026-08-22T18:15:00Z`, TTL ≤ 900s ```bash
- Attended registry reload and cleanup before expiry python3 scripts/audit-core-whitehat-e2-credentials.py preflight
- Never return token values to whitehat, State Hub, or chat python3 scripts/audit-core-whitehat-e2-credentials.py project \
--confirm WH-ENG-20260822-AUDIT-E2-01:attended
```
After that notice, apply the runner contract and the invocation below. Before
18:15Z:
```bash
python3 scripts/audit-core-whitehat-e2-credentials.py cleanup \
--confirm WH-ENG-20260822-AUDIT-E2-01:attended
```
Never return token values to whitehat, State Hub, or chat.
## Runner (inside the admitted pod, after projection) ## Runner (inside the admitted pod, after projection)