{
  "schema_version": "whitehat-run/v1",
  "run_id": "WH-ENG-20260822-AUDIT-E2-02-abort",
  "evidence_class": "abort",
  "engagement_id": "WH-ENG-20260822-AUDIT-E2-02",
  "authorization_id": "operator-session-2026-08-22-e2-02-approval",
  "target": "audit-core",
  "target_revision": "sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6",
  "posture_claim": "implemented E2; currently evidenced E1",
  "attacker_model": "E2-authenticated-tenant-a",
  "started_at": "2026-08-22T19:17:54Z",
  "ended_at": "2026-08-22T19:21:39Z",
  "outcome": "aborted",
  "attempted_operations": 0,
  "cleanup": "runner deleted 19:21:07Z; custody cleanup 19:21:39Z; no leftover Secret, KV paths, or identities",
  "credential_revocation": "custody-owned; receipt broker does not hold credentials",
  "probes": [],
  "limitations": [
    "admit-plane had no receipt adapter at run time; the runner was never invoked.",
    "Zero packets were sent. This is not E2 evidence."
  ],
  "assurance_statement": "Pass means only that the attacks attempted in this run did not work; it is not proof that the tenant boundary always holds."
}