coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
49 commits 1 branch 0 tags 770 KiB
Commit graph

4 commits

Author SHA1 Message Date
tegwick
96d6781036 Prepare receipt-bound audit E2 third attempt 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02991-be07-7bb3-8b6d-e9701b5621de
 2026-08-22 23:23:48 +02:00
tegwick
0db73f0605 Require a WP-0025 broker receipt at admit-plane 
Platform reproduced a recanonicalized projection receipt with a
substituted all-zero broker digest on the operational path. WP-0025
admission now requires --broker-receipt, threads it through
broker_from_receipt, and refuses unless the digest matches exactly.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
 2026-08-22 22:32:15 +02:00
tegwick
5a0eb6b343 Bind WP-0025 receipts to a canonical projection contract 
Railiance's WP-0025 review found the first adapter fail-open: --contract
was optional, receipt_id was not canonical, and target, identities,
resources, UIDs, broker digest and times were unbound. Require the
contract and refuse any receipt that is not the platform canonical form.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
 2026-08-22 22:21:34 +02:00
tegwick
1a38080cdd Add Railiance WP-0025 custody adapter 
Implement src/whitehat_security/platform_custody.py and focused tests
against the four custody schemas. Live admission still fails closed
without a value-safe projection receipt. No new engagement or traffic.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
 2026-08-22 22:02:41 +02:00