whitehat-security/workplans/WHITEHAT-WP-0002-receipt-admission-and-abort-records.md

id	type	title	domain	repo	status	owner	topic_slug	created	updated	state_hub_workstream_id
WHITEHAT-WP-0002	workplan	Receipt admission example, CLI coverage, and abort records	infotech	whitehat-security	finished	net-kingdom	whitehat-security	2026-08-22	2026-08-22	4edaff12-3253-510b-8e9f-5547b8feb260

WHITEHAT-WP-0002 — receipt admission and abort records

Goal

Close the gap that aborted WH-ENG-20260822-AUDIT-E2-02: operators need a checked-in value-safe receipt shape, a CLI path that issues a plane lease from it, and a way to record an abort without calling it target evidence.

This plan does not authorize a live trial. The next E2 run remains a new engagement under WHITEHAT-WP-0001.

Tasks

T01 — Example projection receipt

id: WHITEHAT-WP-0002-T01
status: done
priority: high
state_hub_task_id: "e2819255-da5f-5c23-9eb3-a10aa6066022"

Checked-in example with no secret material, matching schemas/projection-receipt.schema.json. Operators copy it at window start instead of inventing a shape under the three-minute mint gate.

T02 — CLI coverage for admit-plane --receipt

id: WHITEHAT-WP-0002-T02
status: done
priority: high
state_hub_task_id: "1e19bfaa-0d4d-591d-be59-487d60df81ca"

Prove the CLI admits from a valid receipt, refuses secret material, and still fails closed without --receipt.

T03 — Abort records are not target assurance

id: WHITEHAT-WP-0002-T03
status: done
priority: medium
state_hub_task_id: "177b1d2d-bebb-5527-958c-11034150f86e"

Allow evidence_class: abort so a zero-packet abort can be queued without being a Tenancy Posture artifact. Record WH-ENG-20260822-AUDIT-E2-02 that way.

Sequencing

T01 and T02 can proceed together. T03 is independent. None of this is a live run.