tegwick
a61d7df925
Finished custody-adapter plans were quality-debt-open without a DoD assessment. Index WHITEHAT-IN-0001 as closed. Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
73 lines
2 KiB
Markdown
73 lines
2 KiB
Markdown
---
|
||
id: WHITEHAT-WP-0002
|
||
type: workplan
|
||
title: "Receipt admission example, CLI coverage, and abort records"
|
||
domain: infotech
|
||
repo: whitehat-security
|
||
status: finished
|
||
owner: net-kingdom
|
||
topic_slug: whitehat-security
|
||
created: "2026-08-22"
|
||
updated: "2026-09-01"
|
||
state_hub_workstream_id: "4edaff12-3253-510b-8e9f-5547b8feb260"
|
||
quality_dod: DoD-Ok
|
||
quality_dod_at: "2026-09-01"
|
||
quality_dod_by: grok
|
||
quality_dod_note: "T01–T03 done; example receipt, admit-plane CLI, and abort evidence class are checked in. Authorizes no live trial."
|
||
---
|
||
|
||
# WHITEHAT-WP-0002 — receipt admission and abort records
|
||
|
||
## Goal
|
||
|
||
Close the gap that aborted `WH-ENG-20260822-AUDIT-E2-02`: operators need a
|
||
checked-in value-safe receipt shape, a CLI path that issues a plane lease
|
||
from it, and a way to record an abort without calling it target evidence.
|
||
|
||
This plan does **not** authorize a live trial. The next E2 run remains a new
|
||
engagement under WHITEHAT-WP-0001.
|
||
|
||
## Tasks
|
||
|
||
### T01 — Example projection receipt
|
||
|
||
```task
|
||
id: WHITEHAT-WP-0002-T01
|
||
status: done
|
||
priority: high
|
||
state_hub_task_id: "e2819255-da5f-5c23-9eb3-a10aa6066022"
|
||
```
|
||
|
||
Checked-in example with no secret material, matching
|
||
`schemas/projection-receipt.schema.json`. Operators copy it at window start
|
||
instead of inventing a shape under the three-minute mint gate.
|
||
|
||
### T02 — CLI coverage for `admit-plane --receipt`
|
||
|
||
```task
|
||
id: WHITEHAT-WP-0002-T02
|
||
status: done
|
||
priority: high
|
||
state_hub_task_id: "1e19bfaa-0d4d-591d-be59-487d60df81ca"
|
||
```
|
||
|
||
Prove the CLI admits from a valid receipt, refuses secret material, and still
|
||
fails closed without `--receipt`.
|
||
|
||
### T03 — Abort records are not target assurance
|
||
|
||
```task
|
||
id: WHITEHAT-WP-0002-T03
|
||
status: done
|
||
priority: medium
|
||
state_hub_task_id: "177b1d2d-bebb-5527-958c-11034150f86e"
|
||
```
|
||
|
||
Allow `evidence_class: abort` so a zero-packet abort can be queued without
|
||
being a Tenancy Posture artifact. Record `WH-ENG-20260822-AUDIT-E2-02` that
|
||
way.
|
||
|
||
## Sequencing
|
||
|
||
T01 and T02 can proceed together. T03 is independent. None of this is a live
|
||
run.
|