whitehat-security/targets/fixture-asm-t07.json
tegwick 6f1ca0bfef Add in-process known-bad fixtures for remaining ASM T-01–T-10
Each Canon test now has a fixture-asm registration that fails known-bad
and passes known-good in-process. Live asm-tNN targets stay pending.
No network, OpenBao, or packet.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
2026-09-02 13:05:42 +02:00

51 lines
1.5 KiB
JSON

{
"schema_version": "whitehat-target/v1",
"target_id": "fixture-asm-t07",
"posture_claim": "ASM T-07",
"attacker_model": "autonomous actor ignoring cancellation after crossing a declared mutation threshold",
"applicability": "applicable",
"applicability_reason": "In-process T-07 stop-path evaluator. Known-bad disconnects the stop path so over-threshold mutation succeeds. Not a capacity probe.",
"approval_classes": [
"fixture-asm"
],
"specification": "asm-assurance-targets.v1",
"test_id": "T-07",
"title": "Circuit Breaker Test",
"claims": [
"INV-09",
"A-08",
"A-09",
"A-13"
],
"oracle": "mutation-authority-stops-without-actor-cooperation",
"adapter": "src/whitehat_security/asm.py",
"probe_pack": "src/whitehat_security/asm.py",
"known_bad_calibration": "src/whitehat_security/asm.py",
"fixture_lifecycle": {
"create": "in-process constructor",
"delete": "drop process state",
"ids_are_synthetic": true
},
"egress": "in-process",
"surface": [
"in-process-stop-path"
],
"result_route": {
"conformance": "gate-house",
"implementation_finding": "risk-nexus",
"specification_finding": "gate-house",
"harness_gap": "whitehat-security"
},
"routes": [
"t07-over-threshold"
],
"identities": {
"count": 0,
"role": "none; fixture generates no live identity",
"broker_audience": "whitehat-asm/fixture-t-07"
},
"abort_telemetry": [
"kill_switch",
"stop_path_disconnected"
]
}