---
id: WHITEHAT-WP-0002
type: workplan
title: "Receipt admission example, CLI coverage, and abort records"
domain: infotech
repo: whitehat-security
status: finished
owner: net-kingdom
topic_slug: whitehat-security
created: "2026-08-22"
updated: "2026-08-22"
---

# WHITEHAT-WP-0002 — receipt admission and abort records

## Goal

Close the gap that aborted `WH-ENG-20260822-AUDIT-E2-02`: operators need a
checked-in value-safe receipt shape, a CLI path that issues a plane lease
from it, and a way to record an abort without calling it target evidence.

This plan does **not** authorize a live trial. The next E2 run remains a new
engagement under WHITEHAT-WP-0001.

## Tasks

### T01 — Example projection receipt

```task
id: WHITEHAT-WP-0002-T01
status: done
priority: high
```

Checked-in example with no secret material, matching
`schemas/projection-receipt.schema.json`. Operators copy it at window start
instead of inventing a shape under the three-minute mint gate.

### T02 — CLI coverage for `admit-plane --receipt`

```task
id: WHITEHAT-WP-0002-T02
status: done
priority: high
```

Prove the CLI admits from a valid receipt, refuses secret material, and still
fails closed without `--receipt`.

### T03 — Abort records are not target assurance

```task
id: WHITEHAT-WP-0002-T03
status: done
priority: medium
```

Allow `evidence_class: abort` so a zero-packet abort can be queued without
being a Tenancy Posture artifact. Record `WH-ENG-20260822-AUDIT-E2-02` that
way.

## Sequencing

T01 and T02 can proceed together. T03 is independent. None of this is a live
run.