coulomb/whitehat-security
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
whitehat-security/engagements
History
tegwick 5082f86c61 Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic 
Align plane ordering with Mason's apply, record the fresh audit-core
engagement as proposed, and keep offline admission fail-closed until
operator approval and owner acknowledgement exist.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
2026-08-22 11:46:58 +02:00
..
runtime Add governed test plane and close T04/T08 2026-08-22 00:44:21 +02:00
2026-08-21-audit-core-e2.json Record clean security workplan cutoff 2026-08-22 00:24:00 +02:00
2026-08-21-e2-proposals.md Correct audit engagement and idempotent fixture setup 2026-08-22 00:05:15 +02:00
2026-08-21-tenant-engine-e2.json Record clean security workplan cutoff 2026-08-22 00:24:00 +02:00
2026-08-22-audit-core-e2.json Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic 2026-08-22 11:46:58 +02:00
2026-08-22-audit-core-e2.md Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic 2026-08-22 11:46:58 +02:00
2026-08-22-plane-provision.md Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic 2026-08-22 11:46:58 +02:00
README.md Propose WH-ENG-20260822-AUDIT-E2-01 without authorizing traffic 2026-08-22 11:46:58 +02:00
template.json Add governed test plane and close T04/T08 2026-08-22 00:44:21 +02:00

README.md

Engagement records

Copy template.json to a dated, target-specific record and have both the operator and target owner approve it before a live run. The runner validates the record at execution time and fails closed when it is incomplete, expired, outside its window, too permissive, or mismatched to the requested technique or route.

An engagement record contains authorization metadata only. Never put a token, password, database URL, secret path value, or real tenant identifier here.

Live admission also requires a matching file in targets/ and a plane lease from whitehat admit-plane. WH-ENG-20260821-AUDIT-E2 and WH-ENG-20260821-TENANT-E2 are cancelled and must not be reused. The pod manifest under runtime/ is bound to a cancelled ID and must not be applied.

WH-ENG-20260822-AUDIT-E2-01 is proposed. Offline validation must fail closed until operator approval and target-owner acknowledgement are recorded and the custody broker is connected.