tegwick
95129d7a35
Encode fail-closed admission, target registrations, and a credential broker that never returns secret values. Calibrate audit-core shaped probes in-process. Send no packets and request no live credentials. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
36 lines
1.4 KiB
JSON
36 lines
1.4 KiB
JSON
{
|
|
"engagement_id": "WH-ENG-YYYYMMDD-NNN",
|
|
"authorization_id": "approval-record-reference",
|
|
"authorizer": "operator identity",
|
|
"approved_at": "YYYY-MM-DDTHH:MM:SSZ",
|
|
"expires_at": "YYYY-MM-DDTHH:MM:SSZ",
|
|
"target": "https://target.example.invalid",
|
|
"target_id": "registered-target-id",
|
|
"target_owner": "responsible repo or party",
|
|
"target_owner_acknowledged_at": "YYYY-MM-DDTHH:MM:SSZ",
|
|
"environment": "build",
|
|
"approval_class": "live-e2",
|
|
"plane_namespace": "whitehat",
|
|
"runner_image_digest": "sha256:pin-me",
|
|
"namespace": "whitehat",
|
|
"source": "probe source and network position",
|
|
"routes": ["GET /exact/in-scope/route"],
|
|
"fixture_ids": ["synthetic-tenant-a", "synthetic-tenant-b"],
|
|
"credential_lane": "sanctioned custody lane reference",
|
|
"credential_role": "ordinary modeled role",
|
|
"credential_max_ttl_seconds": 900,
|
|
"techniques": ["e2-differential"],
|
|
"prohibited_techniques": ["discovery", "saturation", "real-data collection"],
|
|
"rate_limit_per_minute": 10,
|
|
"max_concurrency": 1,
|
|
"maximum_requests": 30,
|
|
"window_start": "YYYY-MM-DDTHH:MM:SSZ",
|
|
"window_end": "YYYY-MM-DDTHH:MM:SSZ",
|
|
"operator_contact": "operator contact",
|
|
"abort_contact": "target owner contact",
|
|
"abort_thresholds": {"latency_ms": 0, "error_rate": 0},
|
|
"posture_claim": "E2",
|
|
"attacker_model": "E2-authenticated-tenant-a",
|
|
"finding_destination": "risk-nexus"
|
|
}
|
|
|