coulomb/whitehat-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record the hub identifiers for blocked WHITEHAT-WP-0012.

Browse source 
Assistant: grok
Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173
This commit is contained in:
tegwick 2026-10-04 11:17:28 +02:00
parent 5f221cfb76
commit ff54e57db9
2 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
WORK-RECORDS.md
View file

@ -19,6 +19,7 @@
| workplan | WHITEHAT-WP-0009 | finished | — | workplans/WHITEHAT-WP-0009-emergent-knowledge-offline-review.md |
| workplan | WHITEHAT-WP-0010 | finished | — | workplans/WHITEHAT-WP-0010-emergent-knowledge-026-disposition.md |
| workplan | WHITEHAT-WP-0011 | finished | — | workplans/WHITEHAT-WP-0011-scope-capability-gaps.md |
| workplan | WHITEHAT-WP-0012 | blocked | — | workplans/WHITEHAT-WP-0012-ia-classification-and-v-observations.md |
| task | WHITEHAT-WP-0001-T01 | done | — | workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md |
| task | WHITEHAT-WP-0001-T02 | done | — | workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md |
| task | WHITEHAT-WP-0001-T03 | done | — | workplans/WHITEHAT-WP-0001-cross-tenant-evidence.md |
@ -59,5 +60,10 @@
| task | WHITEHAT-WP-0011-T02 | done | — | workplans/WHITEHAT-WP-0011-scope-capability-gaps.md |
| task | WHITEHAT-WP-0011-T03 | done | — | workplans/WHITEHAT-WP-0011-scope-capability-gaps.md |
| task | WHITEHAT-WP-0011-T04 | done | — | workplans/WHITEHAT-WP-0011-scope-capability-gaps.md |
| task | WHITEHAT-WP-0012-T01 | done | — | workplans/WHITEHAT-WP-0012-ia-classification-and-v-observations.md |
| task | WHITEHAT-WP-0012-T02 | done | — | workplans/WHITEHAT-WP-0012-ia-classification-and-v-observations.md |
| task | WHITEHAT-WP-0012-T03 | wait | — | workplans/WHITEHAT-WP-0012-ia-classification-and-v-observations.md |
| task | WHITEHAT-WP-0012-T04 | wait | — | workplans/WHITEHAT-WP-0012-ia-classification-and-v-observations.md |
| task | WHITEHAT-WP-0012-T05 | wait | — | workplans/WHITEHAT-WP-0012-ia-classification-and-v-observations.md |
| intake | WHITEHAT-IN-0001 | closed | — | intakes/intakes.md |
| intake | WHITEHAT-IN-0002 | closed | — | intakes/intakes.md |

6
workplans/WHITEHAT-WP-0012-ia-classification-and-v-observations.md
View file

@ -13,6 +13,7 @@ related:
- WHITEHAT-WP-0006
- WHITEHAT-WP-0008
- WHITEHAT-WP-0011
state_hub_workstream_id: "b37d8173-48da-5981-8d5c-63dc27e0223d"
---
# Classify I and A, calibrate V observations, and name the live residuals
@ -47,6 +48,7 @@ These gaps stay closed as boundaries. They are not wait tasks.
id: WHITEHAT-WP-0012-T01
status: done
priority: high
state_hub_task_id: "9062f1aa-a38a-5afb-a456-b10dfc4fed02"
```
Tenancy Posture v0.1 §13 classifies I2, I3, A2, A3, and A4 evidence as
@ -65,6 +67,7 @@ authorize a demonstration.
id: WHITEHAT-WP-0012-T02
status: done
priority: high
state_hub_task_id: "06a85360-3469-5f02-806c-bfea9ab50ba3"
```
`whitehat v-fixtures` judges a supplied observation. A V2 claim that is only
@ -84,6 +87,7 @@ status: wait
priority: medium
needs_human: true
blocking_reason: "No scanned service declares current E: 4, and apps-pg is recorded as E4 unreachable. An owner must name a service that has a per-tenant credential and a separate per-tenant substrate, the credential class (never the value), the other tenant's substrate, the window, the abort contact, and a complete engagement. Tenancy Posture §13 classifies that demonstration as Mechanical. This task authorizes no connection attempt."
state_hub_task_id: "b8f4e3c4-59a1-5522-be46-5ab1984cee73"
```
Blocked on an owner this repository cannot name. Tenancy Posture Decision
@ -100,6 +104,7 @@ status: wait
priority: medium
needs_human: true
blocking_reason: "R4 evidence is Adversarial. An owner must name the route (horizon-elapsed or key-destroyed), a complete copy inventory covering live data, backups, and derived copies, the erasure horizon, the window, the abort contact, and a complete engagement. audit-core targets R2 and is not this owner. This task authorizes no store access."
state_hub_task_id: "acc22db7-f7c9-5860-9174-6e60773bfd95"
```
Blocked on an owner this repository cannot name. `audit-core` remains an R2
@ -114,6 +119,7 @@ status: wait
priority: medium
needs_human: true
blocking_reason: "V2, V3, and V4 are Adversarial and failure-injected. An operator must name the delivering service, the operation the claim covers, the failure domain, the RTO and RPO, the window, the abort contact, and give the separate approval the rules of engagement §1 require for a recovery probe. V1 stays a mechanical exercise in the declaring service. This task authorizes no failure injection."
state_hub_task_id: "3893b7b1-70dc-5f98-a359-42b08a28fc28"
```
Blocked on an operator record. Decision 4.6 says V is end-to-end and names