coulomb/whitehat-security
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
whitehat-security/engagements
History
tegwick b7306ddc7e Record the rapp-postgres file grant that still leaves live E3 blocked. 
Commit 8d4106f grants SELECT to isolation_probe_app and leaves that role NOLOGIN. platform-pg stays not_applicable until a promotion, a broker LOGIN receipt, and a complete engagement exist. No connection was opened.

Assistant: grok
Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173
2026-10-04 12:09:58 +02:00
..
receipts Prepare receipt-bound audit E2 third attempt 2026-08-22 23:23:48 +02:00
runtime Record the audit-core E2-03 target pass and close T03/T07 2026-08-23 00:42:31 +02:00
2026-08-21-audit-core-e2.json Record clean security workplan cutoff 2026-08-22 00:24:00 +02:00
2026-08-21-e2-proposals.md Correct audit engagement and idempotent fixture setup 2026-08-22 00:05:15 +02:00
2026-08-21-tenant-engine-e2.json Record clean security workplan cutoff 2026-08-22 00:24:00 +02:00
2026-08-22-audit-core-e2-02.json Admit live E2 from a value-safe custody receipt 2026-08-22 21:31:49 +02:00
2026-08-22-audit-core-e2-02.md Admit live E2 from a value-safe custody receipt 2026-08-22 21:31:49 +02:00
2026-08-22-audit-core-e2-03.json Record the audit-core E2-03 target pass and close T03/T07 2026-08-23 00:42:31 +02:00
2026-08-22-audit-core-e2-03.md Record the audit-core E2-03 target pass and close T03/T07 2026-08-23 00:42:31 +02:00
2026-08-22-audit-core-e2.json Expire WH-ENG-20260822-AUDIT-E2-01 after an unused window 2026-08-22 20:20:38 +02:00
2026-08-22-audit-core-e2.md Expire WH-ENG-20260822-AUDIT-E2-01 after an unused window 2026-08-22 20:20:38 +02:00
2026-08-22-plane-provision.md Record operator approval of WH-ENG-20260822-AUDIT-E2-01 2026-08-22 11:54:09 +02:00
2026-10-04-guessed-live-inputs.md Record the rapp-postgres file grant that still leaves live E3 blocked. 2026-10-04 12:09:58 +02:00
README.md Record the audit-core E2-03 target pass and close T03/T07 2026-08-23 00:42:31 +02:00
template.json Add governed test plane and close T04/T08 2026-08-22 00:44:21 +02:00

README.md

Engagement records

Copy template.json to a dated, target-specific record and have both the operator and target owner approve it before a live run. The runner validates the record at execution time and fails closed when it is incomplete, expired, outside its window, too permissive, or mismatched to the requested technique or route.

An engagement record contains authorization metadata only. Never put a token, password, database URL, secret path value, or real tenant identifier here.

Live admission also requires a matching file in targets/ and a plane lease from whitehat admit-plane. WH-ENG-20260821-AUDIT-E2 and WH-ENG-20260821-TENANT-E2 are cancelled and must not be reused. The pod manifest under runtime/ is bound to a cancelled ID and must not be applied.

WH-ENG-20260822-AUDIT-E2-01 expired unused. WH-ENG-20260822-AUDIT-E2-02 aborted after projection because admit-plane had no receipt adapter; zero packets. WH-ENG-20260822-AUDIT-E2-03 completed as a bounded target pass. Those identifiers may not be reused. Live admission requires --receipt, --contract, and --broker-receipt of WP-0025 documents.