{
  "schema_version": "whitehat-target/v1",
  "target_id": "asm-t06",
  "posture_claim": "ASM T-06",
  "attacker_model": "replay, mutation, race, or post-revocation reuse of a bound approval",
  "applicability": "pending",
  "applicability_reason": "Live T-06 still needs a named approval-engine and consuming PEP under a dated engagement. In-process known-bad calibration exists as fixture-asm-t06 against secrets-engine.approval_consume (module first appears at 4b4d556; Gate House cited 3cd9955). This live registration does not authorize a probe.",
  "approval_classes": [
    "asm"
  ],
  "specification": "asm-assurance-targets.v1",
  "test_id": "T-06",
  "title": "Approval Replay Test",
  "claims": [
    "A-04",
    "A-07",
    "A-13",
    "A-15"
  ],
  "oracle": "only-live-exactly-bound-unconsumed-request-succeeds",
  "surface": [
    "approval-engine",
    "access-engine",
    "consuming-pep"
  ],
  "result_route": {
    "conformance": "gate-house",
    "implementation_finding": "risk-nexus",
    "specification_finding": "gate-house",
    "harness_gap": "whitehat-security"
  },
  "routes": [],
  "identities": {
    "count": 0,
    "role": "none until the owning surface names a test identity",
    "broker_audience": "whitehat-asm/t-06"
  },
  "abort_telemetry": [
    "kill_switch",
    "scope_boundary",
    "missing_known_bad_calibration",
    "secret_value_observed"
  ]
}