tegwick
461554a749
Owner acknowledgement remains pending. Offline admission stays fail-closed. No credentials requested and no packets sent. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb |
||
|---|---|---|
| docs | ||
| engagements | ||
| evidence | ||
| outbox | ||
| plane | ||
| probe-packs | ||
| runners | ||
| schemas | ||
| src/whitehat_security | ||
| targets | ||
| tests | ||
| workplans | ||
| .custodian-brief.md | ||
| .gitignore | ||
| .repo-classification.yaml | ||
| AGENTS.md | ||
| INTENT.md | ||
| Makefile | ||
| pyproject.toml | ||
| README.md | ||
| SCOPE.md | ||
| WORK-RECORDS.md | ||
whitehat-security
NetKingdom's offensive security facility. Automated white hat IT-security, pen-testing and isolation-probing — pointed at infrastructure we choose, including our own.
The estate's adversarial evidence facility: it attacks our own systems, on a schedule, to find out whether the security properties they claim are actually true.
It exists because a repo testing its own boundary grades its own homework. The probes most worth having are the ones an author would not think to write.
-
Independent in operation. It does not take a declared posture as true. NetKingdom owns both the security canon and this facility, so findings leave through
risk-nexusunder separate ownership rather than being resolved here. -
It finds; it does not fix. Findings route to
risk-nexus, which owns severity and disclosure. The repo that owns the defect owns the repair. -
A pass means the attacks we tried did not work — not that the boundary holds. Reports say so.
-
Intent:
INTENT.md -
Scope:
SCOPE.md -
Workplans:
workplans/ -
Attacker model:
docs/attacker-model.md -
Rules of engagement (accepted; live targets still require engagement approval):
docs/rules-of-engagement.md -
Operator runbook:
docs/operator-runbook.md -
Session cutoff and redesign handoff:
docs/session-cutoff-2026-08-22.md -
Governed test plane:
docs/test-plane.md -
Target registrations:
targets/ -
Target packs:
probe-packs/
Offline calibration
make check
make fixture-evidence
This proves that every current differential probe, including the audit-core
shaped pack, passes an enforcing fixture and detects the corresponding
missing-tenant-predicate fixture. It sends no network traffic and is not
evidence about a target service. Live execution requires a current
target-specific record, a registered applicable target, and plane admission.
See docs/test-plane.md.