---
id: WHITEHAT-WP-0003
type: workplan
title: "Consume the Railiance WP-0025 custody broker interface"
domain: infotech
repo: whitehat-security
status: finished
owner: net-kingdom
topic_slug: whitehat-security
created: "2026-08-22"
updated: "2026-09-01"
state_hub_workstream_id: "d85f51c4-5e26-5ee7-9e40-8e9a84638f3f"
quality_dod: DoD-Ok
quality_dod_at: "2026-09-01"
quality_dod_by: grok
quality_dod_note: "T01 done; schema-bound adapter and focused tests refuse secret material. Authorizes no engagement."
---

# WHITEHAT-WP-0003 — platform custody adapter

## Goal

Implement the consumer Railiance asked for after `-02` aborted: a value-safe
adapter at `src/whitehat_security/platform_custody.py` that understands the
four WP-0025 custody schemas and can issue a plane lease from a projection
receipt without seeing token values.

This plan authorizes no engagement, runner, credential, or traffic.

## Tasks

### T01 — Schema-bound adapter and focused tests

```task
id: WHITEHAT-WP-0003-T01
status: done
priority: high
state_hub_task_id: "dca9a078-73a0-52ac-89c0-92d36d91873d"
```

Adapter plus `tests/test_platform_custody_adapter.py`. Cleanup receipts can
acknowledge a lease. Secret material is refused. `admit-plane --receipt`
selects this adapter when the document uses
`railiance.custody-projection-receipt`.