tegwick
6f1ca0bfef
Each Canon test now has a fixture-asm registration that fails known-bad and passes known-good in-process. Live asm-tNN targets stay pending. No network, OpenBao, or packet. Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
50 lines
1.6 KiB
JSON
50 lines
1.6 KiB
JSON
{
|
|
"ended_at": "2026-09-02T11:04:58.385199Z",
|
|
"evidence_class": "fixture",
|
|
"known_bad": [
|
|
{
|
|
"openbao_calls": 2,
|
|
"outcome": "pass",
|
|
"probe_id": "t06-exact-consume",
|
|
"reason": "first and same-digest retry consumed"
|
|
},
|
|
{
|
|
"openbao_calls": 1,
|
|
"outcome": "finding",
|
|
"probe_id": "t06-different-digest-replay",
|
|
"reason": "known-bad CAS accepted a different-digest replay and the PEP called OpenBao"
|
|
}
|
|
],
|
|
"known_good": [
|
|
{
|
|
"openbao_calls": 2,
|
|
"outcome": "pass",
|
|
"probe_id": "t06-exact-consume",
|
|
"reason": "first and same-digest retry consumed"
|
|
},
|
|
{
|
|
"openbao_calls": 0,
|
|
"outcome": "pass",
|
|
"probe_id": "t06-different-digest-replay",
|
|
"reason": "different-digest replay rejected; OpenBao not called"
|
|
}
|
|
],
|
|
"limitations": [
|
|
"Offline ASM T-06 calibration evaluates the harness against an in-process CAS.",
|
|
"No network, OpenBao, live approval-engine, or reusable credential was used.",
|
|
"Gate House cited secrets-engine 3cd9955; approval_consume.py first appears at 4b4d556.",
|
|
"This is fixture evidence, not live target assurance."
|
|
],
|
|
"outcome": "pass",
|
|
"run_id": "asm-t06-calibration-2026-09-02T11:04:58.297167Z",
|
|
"schema_version": "whitehat-asm-calibration/v1",
|
|
"specification": "asm-assurance-targets.v1",
|
|
"started_at": "2026-09-02T11:04:58.297167Z",
|
|
"target": {
|
|
"claimed_revision": "3cd9955ac935be398f0fbb6aa7263660a9888721",
|
|
"component": "secrets-engine",
|
|
"consume_module_revision": "4b4d556d6264a5da933f7e14aae0fe27ba1f4300",
|
|
"module": "secrets_engine.approval_consume"
|
|
},
|
|
"test_id": "T-06"
|
|
}
|