75a00836b1
correlation_id: 009a96b7-4fa0-4403-bc89-cd6d2a5afaaa reason: Promoted to WHITEHAT-WP-0007; ten ASM tests triaged as pending source: repo-manager Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
95 lines
5.1 KiB
Markdown
95 lines
5.1 KiB
Markdown
# Intake records
|
||
|
||
## WHITEHAT-IN-0001 — Declaration requested: state this repository's layer in INTENT.md (security layer model §11)
|
||
|
||
```yaml
|
||
id: WHITEHAT-IN-0001
|
||
kind: intake
|
||
title: 'Declaration requested: state this repository''s layer in INTENT.md (security
|
||
layer model §11)'
|
||
status: closed
|
||
origin: cross-repo
|
||
origin_ref: net-kingdom security-layer-model_v0.4 §11
|
||
priority: low
|
||
owner: whitehat-security
|
||
requested_by: gate-house
|
||
proposed_layer: Staff
|
||
description: 'A conformance sweep on 2026-08-28 found this repository has no layer
|
||
declaration of its own. It carries a layering review note gate-house wrote into
|
||
the top of its INTENT.md on 2026-08-24, and that note names a layer — but the words
|
||
are gate-house''s, sitting above a line admitting the body is unadapted. Section
|
||
11 has since been amended to say so explicitly: a layer stated about a repository
|
||
by another repository is not a declaration; only the repository''s own file, in
|
||
its own voice, conforms. Seven of fifteen estate-authored repositories have declared;
|
||
this is one of the eight that have not. REQUESTED: state the layer in INTENT.md
|
||
in your own voice, or contest it. PROPOSED LAYER: Staff. Offensive validation. Beyond
|
||
the label, one substantive item: gate-house authors the assurance specifications
|
||
T-01 to T-10 in the Active Secrets Management Canon and you execute them, with findings
|
||
returning through the conformance loop. That division — we specify, you attack and
|
||
judge whether the control actually held — should be in your words rather than ours,
|
||
and you should push back if specifying the tests from outside your repository is
|
||
the wrong shape. Contesting is a real option and costs nothing — the three repositories
|
||
that reviewed this model each returned a correction, two of which changed the standard.
|
||
If the proposed layer is wrong for what this repository actually does, that is more
|
||
useful to us than a label added to close a checkbox. Standard: net-kingdom/canon/standards/security-layer-model_v0.4.md.'
|
||
created: '2026-08-28T21:03:30.332146Z'
|
||
updated: '2026-09-01T19:00:23.889023Z'
|
||
quality_doc: DoC-Ok
|
||
quality_doc_at: '2026-09-01'
|
||
quality_doc_by: grok
|
||
notes:
|
||
- content: 'Declared Staff in INTENT.md in this repository''s own voice (v0.7 §11
|
||
frontmatter, not the 2026-08-28 review note). Offensive validation is interactive
|
||
and non-deterministic; live E3/P1/P2 sit at zero with no Tooling client (blocked-clean).
|
||
Assent to the conformance loop with one correction: gate-house may specify the
|
||
invariant, including T-01…T-10 as targets; it does not author our probes. A probe
|
||
list written outside this repository is not our evidence.'
|
||
author: whitehat-security
|
||
created: '2026-09-01T18:50:00Z'
|
||
closed_at: '2026-09-01T19:00:23.889023Z'
|
||
outcome: absorbed
|
||
state_hub_intake_id: 01a05e52-d5ed-7ad5-8573-f7a857a90b3b
|
||
```
|
||
|
||
## WHITEHAT-IN-0002 — Triage Gate House ASM T-01–T-10 executable targets
|
||
|
||
```yaml
|
||
id: WHITEHAT-IN-0002
|
||
kind: intake
|
||
title: Triage Gate House ASM T-01–T-10 executable targets
|
||
status: closed
|
||
origin: cross-repo
|
||
origin_ref: gate-house GH-WP-0001-T06 / message 8229c9a4-862f-4d55-842c-5c95702f79d9
|
||
priority: high
|
||
owner: whitehat-security
|
||
requested_by: gate-house
|
||
source_message_id: 8229c9a4-862f-4d55-842c-5c95702f79d9
|
||
specification: asm-assurance-targets.v1
|
||
reporting_contract: conformance-reporting.v1
|
||
authorizes_probe: false
|
||
description: 'Gate House (GH-WP-0001-T06, commit 8cb7250) published executable ASM
|
||
assurance targets T-01 through T-10 and the conformance-reporting.v1 return contract.
|
||
Specs: gate-house/docs/assurance/asm-t01-t10-executable-targets.md, gate-house/docs/assurance/asm-targets.yaml,
|
||
gate-house/docs/contracts/conformance-reporting.md. This fulfills their side of
|
||
the T-01-T-10 split named in WHITEHAT-IN-0001: they specify the invariant; this
|
||
repository owns attack design, execution, and the verdict. REQUESTED: triage each
|
||
Canon test into this repository''s work structure — applicability, target surface,
|
||
known-bad calibration, and result route — preserving the Canon test id. Current
|
||
whitehat-target/v1 approval classes are E2, E3, and capacity, not ASM; mapping or
|
||
extending that schema is this repository''s decision. Acceptance, revision, rejection,
|
||
or split are all valid. This handoff authorizes no fixture, live probe, target,
|
||
credential, or packet. Every run remains under the rules of engagement and a dated
|
||
engagement. Outcomes return to gate-house under conformance-reporting.v1 with subject
|
||
[GH-CONFORMANCE] <test> <outcome> <target>@<revision>; implementation findings still
|
||
route through risk-nexus. Tests: T-01 Malicious Model; T-02 Credential Exfiltration;
|
||
T-03 Human Disconnect; T-04 Policy Self-Modification; T-05 Confused Deputy; T-06
|
||
Approval Replay; T-07 Circuit Breaker; T-08 Audit Reconstruction; T-09 Audit Failure;
|
||
T-10 Revocation Closure.'
|
||
created: '2026-09-01T22:52:47.291284Z'
|
||
updated: '2026-09-01T23:11:26.350174Z'
|
||
state_hub_intake_id: 01a05f2d-d773-76c1-89ec-d5a934e0a207
|
||
routed_to: WHITEHAT-WP-0007
|
||
routed_at: '2026-09-01T23:11:24.530643Z'
|
||
closed_at: '2026-09-01T23:11:26.350174Z'
|
||
outcome: promoted
|
||
```
|