History

tegwick 95129d7a35 Add governed test plane and close T04/T08 Encode fail-closed admission, target registrations, and a credential broker that never returns secret values. Calibrate audit-core shaped probes in-process. Send no packets and request no live credentials. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb	2026-08-22 00:44:21 +02:00
..
offline-calibration.json	Add governed test plane and close T04/T08	2026-08-22 00:44:21 +02:00
README.md	Build authorization-gated tenancy evidence harness	2026-08-21 23:53:27 +02:00

tegwick 95129d7a35 Add governed test plane and close T04/T08

Encode fail-closed admission, target registrations, and a credential
broker that never returns secret values. Calibrate audit-core shaped
probes in-process. Send no packets and request no live credentials.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb

2026-08-22 00:44:21 +02:00

offline-calibration.json

Add governed test plane and close T04/T08

2026-08-22 00:44:21 +02:00

README.md

Build authorization-gated tenancy evidence harness

2026-08-21 23:53:27 +02:00

README.md

Evidence

This directory stores sanitized run artifacts. offline-calibration.json is generated from repository-created fixtures and proves only that the harness distinguishes known-good from known-bad behavior.

Before committing target evidence, verify that it contains no response body, credential, database URL, real tenant identifier, or real tenant value. A run-local digest is allowed; it must not be reusable across runs as a data oracle.