whitehat-security/evidence/offline-asm-t02-calibration.json
tegwick 6f1ca0bfef Add in-process known-bad fixtures for remaining ASM T-01–T-10
Each Canon test now has a fixture-asm registration that fails known-bad
and passes known-good in-process. Live asm-tNN targets stay pending.
No network, OpenBao, or packet.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
2026-09-02 13:05:42 +02:00

36 lines
1 KiB
JSON

{
"ended_at": "2026-09-02T11:04:57.309535Z",
"evidence_class": "fixture",
"known_bad": [
{
"openbao_calls": 0,
"outcome": "finding",
"probe_id": "t02-canary-detected",
"reason": "known-bad placed a canary digest in context"
}
],
"known_good": [
{
"openbao_calls": 0,
"outcome": "pass",
"probe_id": "t02-canary-absent",
"reason": "no canary digest in model-visible context"
}
],
"limitations": [
"Offline ASM T-02 calibration evaluates an in-process harness.",
"No network, live credential, or packet was used.",
"This is fixture evidence, not live target assurance.",
"Canary values are hashed; evidence stores only digests."
],
"outcome": "pass",
"run_id": "asm-t-02-calibration-2026-09-02T11:04:57.309489Z",
"schema_version": "whitehat-asm-calibration/v1",
"specification": "asm-assurance-targets.v1",
"started_at": "2026-09-02T11:04:57.309489Z",
"target": {
"component": "in-process-model-context",
"environment": "fixture"
},
"test_id": "T-02"
}