coulomb/whitehat-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
whitehat-security/evidence
History
tegwick eebcc39a12 Classify I and A as mechanical and calibrate V observations offline. 
WHITEHAT-WP-0012 records that identity and authorization evidence belongs in the declaring service's CI, and adds an in-process V2/V3/V4 observation judge that injects no failure. Live E4, R4, and V stay wait on an unnamed owner or operator, so the plan is blocked. No packet is authorized.

Assistant: grok
Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173
2026-10-04 11:15:01 +02:00
..
2026-10-03-emergent-021-offline-review.json Preserve Emergent knowledge offline review and outstanding acceptance gate 2026-10-03 18:12:51 +02:00
2026-10-03-emergent-021-offline-review.md Record the 0.2.3 offline retest and the remaining WP-0009 blockers. 2026-10-03 18:45:33 +02:00
2026-10-03-emergent-023-offline-retest.json Record the 0.2.3 offline retest and the remaining WP-0009 blockers. 2026-10-03 18:45:33 +02:00
2026-10-03-emergent-023-offline-retest.md Record the 0.2.3 offline retest and the remaining WP-0009 blockers. 2026-10-03 18:45:33 +02:00
2026-10-04-emergent-026-corpus-disposition.json Record the offline disposition of Emergent knowledge 0.2.6. 2026-10-04 02:38:29 +02:00
2026-10-04-emergent-026-library-probes.json Record the offline disposition of Emergent knowledge 0.2.6. 2026-10-04 02:38:29 +02:00
2026-10-04-emergent-026-offline-review.md Record the offline disposition of Emergent knowledge 0.2.6. 2026-10-04 02:38:29 +02:00
offline-asm-t01-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t02-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t03-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t04-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t05-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t06-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t07-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t08-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t09-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-asm-t10-calibration.json Add in-process known-bad fixtures for remaining ASM T-01–T-10 2026-09-02 13:05:42 +02:00
offline-calibration.json Add governed test plane and close T04/T08 2026-08-22 00:44:21 +02:00
offline-capacity-calibration.json Finish WHITEHAT-WP-0001 and own live residuals in WP-0006 2026-09-01 20:26:47 +02:00
offline-e3-calibration.json Admit E3 and capacity on the test plane 2026-08-22 09:40:27 +02:00
offline-e4-calibration.json State the harness scope and calibrate E4 and R4 offline. 2026-10-04 08:54:40 +02:00
offline-r4-calibration.json State the harness scope and calibrate E4 and R4 offline. 2026-10-04 08:54:40 +02:00
offline-v-calibration.json Classify I and A as mechanical and calibrate V observations offline. 2026-10-04 11:15:01 +02:00
probe-cadence.json Classify I and A as mechanical and calibrate V observations offline. 2026-10-04 11:15:01 +02:00
README.md Classify I and A as mechanical and calibrate V observations offline. 2026-10-04 11:15:01 +02:00
WH-ENG-20260822-AUDIT-E2-02-abort.json Add WHITEHAT-WP-0002 receipt example, CLI coverage, and abort records 2026-08-22 21:40:33 +02:00
WH-ENG-20260822-AUDIT-E2-03.json Record the audit-core E2-03 target pass and close T03/T07 2026-08-23 00:42:31 +02:00

README.md

Evidence

This directory stores sanitized run artifacts. offline-calibration.json, offline-e3-calibration.json, offline-e4-calibration.json, offline-r4-calibration.json, offline-v-calibration.json, offline-capacity-calibration.json, and offline-asm-t01-calibration.json … offline-asm-t10-calibration.json are generated from repository-created fixtures and prove only that the harness distinguishes known-good from known-bad behavior. They are not target assurance. probe-cadence.json is the unscheduled cadence register. WH-ENG-20260822-AUDIT-E2-02-abort.json is an abort record (evidence_class: abort), not an E2 pass or finding. WH-ENG-20260822-AUDIT-E2-03.json is the first authorized target pass; SHA-256 2d5a21141b78024a5334881e2b7fd62a69c46931057f77515a6c6f18ec497593. A pass means only that the attempted attacks did not work.

Before committing target evidence, verify that it contains no response body, credential, database URL, real tenant identifier, or real tenant value. A run-local digest is allowed; it must not be reusable across runs as a data oracle.

2026-10-03-emergent-021-offline-review.json, 2026-10-03-emergent-023-offline-retest.json, 2026-10-04-emergent-026-library-probes.json, and 2026-10-04-emergent-026-corpus-disposition.json are offline knowledge-release reviews. They are not evidence_class: target and they are not queued as target assurance.