Record the offline disposition of Emergent knowledge 0.2.6.

The sealed digest passes the calibrated library probes. The recorded corpus
shows no unsafe effect, and the zones and model-switch routes match the
fixture. RISK-F-0015 and EMERGENT-WP-0002-T07 stay with their owners.

Assistant: grok
Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173

workplans/WHITEHAT-WP-0010-emergent-knowledge-026-disposition.md

@@ -0,0 +1,89 @@
+---
+id: WHITEHAT-WP-0010
+type: workplan
+title: "Offline disposition of Emergent knowledge release 0.2.6"
+domain: infotech
+repo: whitehat-security
+status: finished
+owner: whitehat-security
+topic_slug: whitehat-security
+created: "2026-10-04"
+updated: "2026-10-04"
+related:
+  - EMERGENT-WP-0002
+  - WHITEHAT-WP-0009
+---
+
+# Offline disposition of knowledge 0.2.6
+
+Requested by emergent-security message `e0f927e2-7221-4eb7-b263-7f8e45c5ada8`.
+This plan owns the bounded Whitehat disposition of sealed release 0.2.6. It
+does not reopen WHITEHAT-WP-0009. It authorizes no live packet, credential,
+or provider call. Rules of engagement v0.2 sections 1 and 11 permit the
+non-networked fixtures and the read of the sealed records.
+
+## T01 — Verify the seal and run calibrated library probes
+
+```task
+id: WHITEHAT-WP-0010-T01
+status: done
+priority: high
+```
+
+Release 0.2.6, digest
+`8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02`, package
+commit `f65d0e64bc710eafb1dac4dd64b05516493d8c31`. Nine oracle-calibrated
+probes passed. Known-bad failed and known-good passed. WH-KNOW-001 and
+WH-KNOW-002 were not reproduced. The 2026-10-04 source check left
+`informed-decision` `changed`; the other 23 owners were `verified-files`.
+Whitehat did not re-pin that source.
+
+## T02 — Judge the recorded 28-case answers
+
+```task
+id: WHITEHAT-WP-0010-T02
+status: done
+priority: high
+```
+
+Read the corpus at `f542a91deb003feb7fad3ecc17504c514a7c5479`. No answer
+recommends an unsafe effect. `zones` is `zone-engine` and `model-switch` is
+`session-owner` in all three records, with `glas-harness` in the
+model-switch sources. Seventeen fixture route tokens match in each session.
+The other eleven are retained qualifications and are ungraded here. Codex
+has no exact server model in the event stream. This is not compaction proof
+and not a governed harness session.
+
+## T03 — Deliver the disposition and the dependency requirements
+
+```task
+id: WHITEHAT-WP-0010-T03
+status: done
+priority: high
+```
+
+Evidence: `evidence/2026-10-04-emergent-026-offline-review.md`,
+`evidence/2026-10-04-emergent-026-library-probes.json`, and
+`evidence/2026-10-04-emergent-026-corpus-disposition.json`. The reproducer
+accepts `--today` and still defaults to the 0.2.1 review date. Whitehat
+assigns no severity and does not edit `emergent-security` or `risk-nexus`.
+
+## Dependencies owned elsewhere
+
+WHITEHAT-WP-0006 and WHITEHAT-WP-0008 stay blocked. Nothing in this plan
+authorizes their live runs.
+
+1. `emergent-security` EMERGENT-WP-0002-T07 stays `wait` until that
+   repository records whether this disposition meets its whitehat-review
+   gate for digest `8d1d6a9d` at `f65d0e64`. This delivery is not that
+   acceptance. Before anyone treats the launch-time 24-owner source check
+   as still true, reconcile `informed-decision` pin
+   `b4f637326ba3c2526f4648c4c90544948408d53f` with clean sibling HEAD
+   `b65363527e41a76140a3967fe5e84ef5fc2f190b`. The differing path is
+   `workplans/INFD-WP-0005-frictionless-decision-intake.md`. Do not re-pin
+   from this review. Source-validated startup stays withheld.
+2. `risk-nexus` records the disposition against open RISK-F-0015. The two
+   named routes match the fixture in this corpus, and the 0.2.1 Claude
+   misses are not repeated. Closure remains T07's acceptance of complete
+   current-release provider evidence. The other route tokens are reported
+   with grading unset. Whitehat does not file a new finding for them.