Classify I and A as mechanical and calibrate V observations offline.

WHITEHAT-WP-0012 records that identity and authorization evidence belongs in the declaring service's CI, and adds an in-process V2/V3/V4 observation judge that injects no failure. Live E4, R4, and V stay wait on an unnamed owner or operator, so the plan is blocked. No packet is authorized.

Assistant: grok
Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173

docs/attacker-model.md

@@ -167,6 +167,9 @@ credential issuer; or permission to alter routing/provisioning state.
 
 Executable calibration is `whitehat e4-fixtures`. It is in-process, projects
 no credential, and is not target assurance. No live E4 target is registered.
+Tenancy Posture §13 classifies the live E4 artifact as Mechanical. This
+calibration does not perform that demonstration. A live demonstration waits
+on `WHITEHAT-WP-0012-T03`.
 
 ## 6. Shared P1/P2 capacity — bounded co-resident
 
@@ -229,7 +232,8 @@ alone is not a pass.
 
 An undeclared backup, escrow or recovery key invented for the test. If the
 evidence inventory cannot show that every declared copy was exercised, the
-outcome is inconclusive rather than pass.
+outcome is inconclusive rather than pass. A live exercise waits on
+`WHITEHAT-WP-0012-T04`.
 
 `audit-core` is not an R4 target under its current integrity-chain design; it
 targets R2. The facility does not erase the evidence service's retained facts
@@ -239,12 +243,45 @@ Executable calibration is `whitehat r4-fixtures`. It is in-process, opens no
 store, and is not target assurance. An incomplete copy inventory stays
 inconclusive. No live R4 target is registered.
 
-## 8. Axes outside this first model
+## 8. Axes outside this adversarial facility
 
-Identity (`I`), authorization (`A`) and availability (`V`) have evidence
-requirements in Tenancy Posture, but `WHITEHAT-WP-0001` does not yet define
-their adversarial facilities. A run under this document must not claim evidence
-for those axes merely because it observed related behavior.
+Tenancy Posture v0.1 §13 classifies the evidence, and this section follows
+that classification. A run under this document must not claim an axis merely
+because it observed related behavior.
+
+### Identity (I) and authorization (A)
+
+I2, I3, A2, A3, and A4 evidence is Mechanical. It belongs in the declaring
+service's CI: identifier validation, a rejection test, a verified-token
+binding, a live re-query on an `aal2`-class path, a choke point that refuses
+an unbound request, a denial observed at the endpoint, and a second PDP
+substituted without a PEP change. This repository does not build an
+adversarial probe for those artifacts. `whitehat cadence` has no I or A
+family.
+
+### Availability (V)
+
+V1 is a Mechanical exercise: enumerate critical dependencies, restart or
+recreate, and record the interruption and recovery time. A restart is not
+V2. V2, V3, and V4 are Adversarial and failure-injected. Decision 4.6 says V
+is end-to-end and names the operation; the delivering service owns the
+declaration.
+
+`whitehat v-fixtures` judges a supplied observation. It does not terminate an
+instance, remove a failure domain, or make a region unavailable. A pass means
+the observation record has the shape §13 requires. It does not mean a service
+recovered. A V2 claim that is only a restart, a claim with no failure
+injected, and traffic that did not continue or recover are findings. A claim
+that omits the operation, measured RTO/RPO, or the remaining shared failure
+domain stays inconclusive. V1 stays inconclusive here. A live exercise waits
+on `WHITEHAT-WP-0012-T05` and needs the separate operator approval required
+by the rules of engagement §1.
+
+### R4
+
+R4 remains Adversarial. The in-process calibration is `whitehat r4-fixtures`.
+No live R4 target is registered. A live exercise waits on
+`WHITEHAT-WP-0012-T04`. `audit-core` targets R2 and is not that owner.
 
 ## 9. Model selection and review