tegwick
eebcc39a12
WHITEHAT-WP-0012 records that identity and authorization evidence belongs in the declaring service's CI, and adds an in-process V2/V3/V4 observation judge that injects no failure. Live E4, R4, and V stay wait on an unnamed owner or operator, so the plan is blocked. No packet is authorized. Assistant: grok Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173
32 lines
1 KiB
JSON
32 lines
1 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "whitehat-target/v1",
|
|
"type": "object",
|
|
"additionalProperties": true,
|
|
"required": [
|
|
"schema_version", "target_id", "posture_claim", "attacker_model",
|
|
"applicability", "applicability_reason", "approval_classes", "routes",
|
|
"identities", "abort_telemetry"
|
|
],
|
|
"properties": {
|
|
"schema_version": {"const": "whitehat-target/v1"},
|
|
"applicability": {"enum": ["applicable", "not_applicable", "pending"]},
|
|
"approval_classes": {
|
|
"type": "array",
|
|
"minItems": 1,
|
|
"items": {"enum": [
|
|
"fixture-e2", "live-e2", "fixture-e3", "e3",
|
|
"fixture-capacity", "capacity", "fixture-asm", "asm",
|
|
"fixture-e4", "fixture-r4", "fixture-v"
|
|
]}
|
|
},
|
|
"routes": {"type": "array", "items": {"type": "string"}},
|
|
"identities": {
|
|
"type": "object",
|
|
"properties": {
|
|
"count": {"type": "integer", "minimum": 0, "maximum": 2},
|
|
"ttl_seconds": {"type": "integer", "minimum": 1, "maximum": 900}
|
|
}
|
|
}
|
|
}
|
|
}
|