tegwick
eebcc39a12
WHITEHAT-WP-0012 records that identity and authorization evidence belongs in the declaring service's CI, and adds an in-process V2/V3/V4 observation judge that injects no failure. Live E4, R4, and V stay wait on an unnamed owner or operator, so the plan is blocked. No packet is authorized. Assistant: grok Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173
34 lines
1.2 KiB
JSON
34 lines
1.2 KiB
JSON
{
|
|
"schema_version": "whitehat-target/v1",
|
|
"target_id": "fixture-v",
|
|
"posture_claim": "V2",
|
|
"attacker_model": "supplied V2/V3/V4 observation; the harness injects no failure",
|
|
"applicability": "applicable",
|
|
"applicability_reason": "In-process evaluator created by this repository. It injects no failure, projects no credential, and makes no cluster call. No live availability target is registered. V1 stays a mechanical exercise of the declaring service.",
|
|
"approval_classes": ["fixture-v"],
|
|
"adapter": "src/whitehat_security/v.py",
|
|
"probe_pack": "src/whitehat_security/v.py",
|
|
"known_bad_calibration": "src/whitehat_security/v.py",
|
|
"fixture_lifecycle": {
|
|
"create": "in-process observations",
|
|
"delete": "drop process state",
|
|
"ids_are_synthetic": true
|
|
},
|
|
"egress": "in-process",
|
|
"routes": [
|
|
"instance-terminated",
|
|
"failure-domain-removed",
|
|
"region-unavailable",
|
|
"restart"
|
|
],
|
|
"identities": {
|
|
"count": 0,
|
|
"role": "none; fixture projects no credential and injects no failure",
|
|
"broker_audience": "whitehat-v/fixture"
|
|
},
|
|
"abort_telemetry": [
|
|
"failure_injection_attempt",
|
|
"cluster_mutation",
|
|
"missing_measurement"
|
|
]
|
|
}
|