coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expire WH-ENG-20260822-AUDIT-E2-01 after an unused window

Browse source 
The 18:00Z-18:15Z window ended with no projection-ready notice and zero
packets. Mark the identifier terminal. Record platform-pg E3 as not
applicable for an ordinary runtime conformance-view identity.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 20:20:38 +02:00
parent da98590d2a
commit f8251c5de8
15 changed files with 56 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

4
engagements/2026-08-22-audit-core-e2.json
View file

@ -1,6 +1,8 @@
{
"engagement_id": "WH-ENG-20260822-AUDIT-E2-01",
"status": "approved",
"status": "expired",
"expired_at": "2026-08-22T18:15:00Z",
"expiry_reason": "Approved window ended with no projection-ready notice from railiance-platform and zero target requests. Do not reuse this identifier.",
"proposal_at": "2026-08-22T09:44:00Z",
"proposal_reason": "Fresh live-e2 proposal after foundational plane apply. Do not reuse WH-ENG-20260821-AUDIT-E2.",
"authorization_id": "operator-session-2026-08-22-e2-approval",

14
engagements/2026-08-22-audit-core-e2.md
View file

@ -1,8 +1,8 @@
# WH-ENG-20260822-AUDIT-E2-01
Status: **operator-approved and target-owner-acknowledged**. The window has
not started. Credentials must not be minted until window start so the 900s
TTL covers the run and cleanup.
Status: **expired**. The approved window ended at `2026-08-22T18:15:00Z` with
no projection-ready notice and zero target requests. This identifier is
terminal and must not be reused.
| Gate | State |
| --- | --- |
@ -11,12 +11,12 @@ TTL covers the run and cleanup.
| Foundational plane | applied by ops-mason `c26a6e5` |
| Window | `2026-08-22T18:00:00Z`–`18:15:00Z` |
| Image | `sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6` |
| Custody projection | scheduled, not minted |
| Custody projection | never minted; no projection-ready notice arrived |
| Runner pod | not applied |
| Packets | none |
Offline preflight now fails closed with `engagement window has not started`.
At `18:00Z`, `Engagement.load` authorizes the record; `admit-plane` still
fails closed until the live custody broker is connected.
Offline preflight fails closed with `engagement window elapsed with no live
run`. A retry needs a new identifier.
Invocation, including required `--forged-event whitehat-e2-forged-b-20260822`:
`engagements/runtime/WH-ENG-20260822-AUDIT-E2-01-invocation.md`.

5
engagements/README.md
View file

@ -14,7 +14,6 @@ from `whitehat admit-plane`. `WH-ENG-20260821-AUDIT-E2` and
`WH-ENG-20260821-TENANT-E2` are cancelled and must not be reused. The pod
manifest under `runtime/` is bound to a cancelled ID and must not be applied.
`WH-ENG-20260822-AUDIT-E2-01` is operator-approved and owner-acknowledged.
Offline validation currently fails closed because the window has not started.
Do not mint the 900s identities until `2026-08-22T18:00:00Z`.
`WH-ENG-20260822-AUDIT-E2-01` expired at `2026-08-22T18:15:00Z` with no live
run. Do not reuse it. A later attempt needs a new identifier and window.

5
engagements/runtime/WH-ENG-20260822-AUDIT-E2-01-invocation.md
View file

@ -1,8 +1,7 @@
# WH-ENG-20260822-AUDIT-E2-01 — invocation (no secrets)
Do not apply the runner pod and do not mint credentials until the custody
owner projects two mount-only tokens at window start. Minting now would
exhaust the 900-second TTL before `18:00Z`.
This window elapsed at `2026-08-22T18:15:00Z` with no projection and no
packets. Do not apply the runner or mint credentials against this identifier.
Current time-gate: `validate-engagement` and `admit-plane` fail closed with
`engagement window has not started` until `2026-08-22T18:00:00Z`. After the