From edc9df04911d1da1c1883cd83fb121cd4394aed8 Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 22 Aug 2026 00:04:02 +0200 Subject: [PATCH] Bound E2 engagement control-plane operations Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a0260c-4067-7052-9647-ad000d576e38 --- engagements/2026-08-21-audit-core-e2.json | 10 ++++++++-- engagements/2026-08-21-tenant-engine-e2.json | 10 ++++++++-- 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/engagements/2026-08-21-audit-core-e2.json b/engagements/2026-08-21-audit-core-e2.json index 6fece37..f772d61 100644 --- a/engagements/2026-08-21-audit-core-e2.json +++ b/engagements/2026-08-21-audit-core-e2.json @@ -11,6 +11,12 @@ "production_approval": "Explicit user approval of engagements/2026-08-21-e2-proposals.md in the coordinating session", "namespace": "audit-core", "source": "dedicated attributed probe pod in an owner-approved ingress namespace", + "control_plane_scope": [ + "GET apps/v1 deployment audit-core/audit-core for target revision only", + "GET v1 service audit-core/audit-core for target identity only", + "CREATE/GET/DELETE one named attributed probe pod and its credential projection only", + "GET the named probe pod log only" + ], "routes": [ "GET /readyz", "POST /v1/events", @@ -28,7 +34,8 @@ "techniques": ["e2-differential"], "prohibited_techniques": [ "discovery", "direct-database-access", "saturation", "large-payload", - "real-data-collection", "adjacent-service-follow-up" + "real-data-collection", "adjacent-service-follow-up", + "any control-plane operation outside control_plane_scope" ], "rate_limit_per_minute": 10, "max_concurrency": 1, @@ -47,4 +54,3 @@ "attacker_model": "E2-authenticated-tenant-a", "finding_destination": "risk-nexus" } - diff --git a/engagements/2026-08-21-tenant-engine-e2.json b/engagements/2026-08-21-tenant-engine-e2.json index 1d44278..5a29ff5 100644 --- a/engagements/2026-08-21-tenant-engine-e2.json +++ b/engagements/2026-08-21-tenant-engine-e2.json @@ -11,6 +11,12 @@ "production_approval": "Explicit user approval of engagements/2026-08-21-e2-proposals.md in the coordinating session", "namespace": "tenant-engine", "source": "dedicated pod user-engine/whitehat-e2-tenant, labelled and attributed with this engagement id", + "control_plane_scope": [ + "GET apps/v1 deployment tenant-engine/tenant-engine for target revision only", + "GET v1 service tenant-engine/tenant-engine for target identity only", + "CREATE/GET/DELETE v1 pod user-engine/whitehat-e2-tenant only", + "GET pod log user-engine/whitehat-e2-tenant only" + ], "routes": [ "GET /health", "POST /tenants", @@ -39,7 +45,8 @@ "techniques": ["e2-differential"], "prohibited_techniques": [ "discovery", "direct-database-access", "saturation", "large-payload", - "real-data-collection", "adjacent-service-follow-up" + "real-data-collection", "adjacent-service-follow-up", + "any control-plane operation outside control_plane_scope" ], "rate_limit_per_minute": 10, "max_concurrency": 1, @@ -58,4 +65,3 @@ "attacker_model": "E2-authenticated-tenant-a", "finding_destination": "risk-nexus" } -