{
  "schema_version": "whitehat-target/v1",
  "target_id": "tenant-engine",
  "posture_claim": "implemented E2; currently evidenced E1",
  "attacker_model": "E2-authenticated-tenant-a",
  "applicability": "not_applicable",
  "applicability_reason": "No authenticated tenant-A identity with no tenant-B authority exists. The platform operator is allowed to address every tenant; an unregistered actor tests caller authorization, not E2. Whitehat will not substitute either identity to finish the workplan.",
  "approval_classes": ["live-e2"],
  "routes": [],
  "identities": {
    "count": 2,
    "role": "ordinary tenant-scoped caller; none currently exposed",
    "ttl_seconds": 900,
    "broker_audience": "whitehat-e2/tenant-engine"
  },
  "abort_telemetry": [
    "p95_latency_ms",
    "probe_attributable_5xx",
    "unexpected_or_non_fixture_data",
    "missing_attribution"
  ]
}