# Projection receipts

Legacy value-safe receipts remain supported for historical fixtures. New live
engagements use the canonical RAILIANCE-WP-0025 contract, broker-readiness,
projection, and cleanup receipts. Never hand-edit a live receipt or put token
values, passwords, or registry payloads here.

Live admission:

```sh
PYTHONPATH=src python3 -m whitehat_security.cli admit-plane \
  engagements/<record>.json targets/audit-core-e2.json \
  --receipt /approved/path/projection.json \
  --contract /approved/path/projection-contract.json \
  --broker-receipt /approved/path/broker.json
```

Without all three bound documents, WP-0025 admission fails closed and requests
no credential. After platform cleanup, use `finalize-report` with the cleanup
receipt before delivery.