coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Expire WH-ENG-20260822-AUDIT-E2-01 after an unused window

Browse source 
The 18:00Z-18:15Z window ended with no projection-ready notice and zero
packets. Mark the identifier terminal. Record platform-pg E3 as not
applicable for an ordinary runtime conformance-view identity.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
This commit is contained in:
tegwick 2026-08-22 20:20:38 +02:00
parent da98590d2a
commit f8251c5de8
15 changed files with 56 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

12
workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md
View file

@ -162,9 +162,10 @@ target request and are retired. ops-mason applied the foundational plane on
2026-08-22. The operator approved `WH-ENG-20260822-AUDIT-E2-01` at
2026-08-22T09:52:55Z; audit-core acknowledged at 2026-08-22T10:04:56Z
(`32afceb`) after the fixture/digest correction `1418dac`. Offline preflight
now fails closed because the window has not started. Custody must project two
≤900s identities at `18:00Z`, not earlier. Whitehat will not relabel
tenant-engine to finish this task.
recorded a window that elapsed at 18:15Z with no projection-ready notice and
zero packets. That identifier is expired and must not be reused. A later live
E2 run needs a new ID, a new window, and a fresh attended projection.
Whitehat will not relabel tenant-engine to finish this task.
### T04 — Prove the probes fail
@ -223,8 +224,9 @@ and reporting latency, with event-triggered pre-promotion runs after schema,
role, RLS or security-definer changes. `src/whitehat_security/e3.py` encodes the
seven expected outcomes, keeps the SQL-compromise GUC reset labeled as E3's
documented limit, and calibrates known-good/known-bad in-process. `platform-pg`
is registered `pending`. A live database run still requires its separate
authorized target, named database, ordinary runtime role, and window.
is `not_applicable` for an ordinary runtime conformance-view identity
(rapp-postgres, 2026-08-22). A live database run still requires a separately
reviewed runtime-safe surface, named database, and window.
### T06 — Noisy-neighbour characterisation (the P1/P2 artifact)