coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expire WH-ENG-20260822-AUDIT-E2-01 after an unused window

Browse source 
The 18:00Z-18:15Z window ended with no projection-ready notice and zero
packets. Mark the identifier terminal. Record platform-pg E3 as not
applicable for an ordinary runtime conformance-view identity.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 20:20:38 +02:00
parent da98590d2a
commit f8251c5de8
15 changed files with 56 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

7
tests/test_plane.py
View file

@ -62,7 +62,7 @@ def test_catalog_loads_honest_applicability():
assert catalog["flex-auth"]["applicability"] == "pending"
assert catalog["fixture-e3"]["applicability"] == "applicable"
assert catalog["fixture-capacity"]["applicability"] == "applicable"
assert catalog["platform-pg"]["applicability"] == "pending"
assert catalog["platform-pg"]["applicability"] == "not_applicable"
assert catalog["shared-substrate"]["applicability"] == "pending"
@ -70,6 +70,7 @@ def test_retired_ids_include_cancelled_records():
ids = retired_ids()
assert "WH-ENG-20260821-AUDIT-E2" in ids
assert "WH-ENG-20260821-TENANT-E2" in ids
assert "WH-ENG-20260822-AUDIT-E2-01" in ids
def test_fixture_plane_admits_and_projects_handles_without_secrets(tmp_path):
@ -207,14 +208,14 @@ def test_fixture_capacity_projects_no_identities(tmp_path):
assert cleanup(lease, broker)["credential_revocation"] == "revoked"
def test_pending_e3_target_is_refused(tmp_path):
def test_not_applicable_e3_target_is_refused(tmp_path):
engagement = load_engagement(tmp_path, fixture_record(
target_id="platform-pg", approval_class="e3",
techniques=["e3-rls"], environment="build",
plane_namespace="whitehat", runner_image_digest="sha256:abc",
database="platform-pg", routes=["conformance"],
))
with pytest.raises(AuthorizationError, match="pending"):
with pytest.raises(AuthorizationError, match="not_applicable"):
admit(
engagement=engagement,
registration=load_registration("targets/platform-pg-e3.json"),