tegwick
481ed6add5
Meantime polish while live E2 waits on a new trial. Example receipts carry handles only. admit-plane --receipt is tested. Aborts can be queued without being target assurance. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
23 lines
1.1 KiB
JSON
23 lines
1.1 KiB
JSON
{
|
|
"schema_version": "whitehat-run/v1",
|
|
"run_id": "WH-ENG-20260822-AUDIT-E2-02-abort",
|
|
"evidence_class": "abort",
|
|
"engagement_id": "WH-ENG-20260822-AUDIT-E2-02",
|
|
"authorization_id": "operator-session-2026-08-22-e2-02-approval",
|
|
"target": "audit-core",
|
|
"target_revision": "sha256:c2fe39a0185b99be3fc0cb14d2de69772b8e66e20490097c9d11d90cc39719a6",
|
|
"posture_claim": "implemented E2; currently evidenced E1",
|
|
"attacker_model": "E2-authenticated-tenant-a",
|
|
"started_at": "2026-08-22T19:17:54Z",
|
|
"ended_at": "2026-08-22T19:21:39Z",
|
|
"outcome": "aborted",
|
|
"attempted_operations": 0,
|
|
"cleanup": "runner deleted 19:21:07Z; custody cleanup 19:21:39Z; no leftover Secret, KV paths, or identities",
|
|
"credential_revocation": "custody-owned; receipt broker does not hold credentials",
|
|
"probes": [],
|
|
"limitations": [
|
|
"admit-plane had no receipt adapter at run time; the runner was never invoked.",
|
|
"Zero packets were sent. This is not E2 evidence."
|
|
],
|
|
"assurance_statement": "Pass means only that the attacks attempted in this run did not work; it is not proof that the tenant boundary always holds."
|
|
}
|