tegwick
5384f051d2
Extend whitehat-target/v1 with fixture-asm/asm instead of mapping onto E2, E3, or capacity. Register all ten Canon tests as pending with named blockers, known-bad designs, and result routes. Add a value-safe conformance-message renderer. Authorizes no probe. Assistant: grok Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
45 lines
1.4 KiB
JSON
45 lines
1.4 KiB
JSON
{
|
|
"schema_version": "whitehat-target/v1",
|
|
"target_id": "asm-t09",
|
|
"posture_claim": "ASM T-09",
|
|
"attacker_model": "disabling outbox insert, drain, or archive around privileged mutation and emergency revocation",
|
|
"applicability": "pending",
|
|
"applicability_reason": "Load-bearing evidence semantics are not declared by the owner. Disabling outbox or archive is outside standing live-e2 and needs its own engagement. Known-bad design: emit-after-commit (silent gap) and synchronous-archive-in-transaction (blocked revocation). This registration does not authorize a probe.",
|
|
"approval_classes": [
|
|
"asm"
|
|
],
|
|
"specification": "asm-assurance-targets.v1",
|
|
"test_id": "T-09",
|
|
"title": "Audit Failure Test",
|
|
"claims": [
|
|
"INV-10",
|
|
"INV-12",
|
|
"A-12",
|
|
"A-13"
|
|
],
|
|
"oracle": "declared-local-atomicity-and-outage-semantics-hold",
|
|
"surface": [
|
|
"state-owner",
|
|
"local-outbox",
|
|
"drain",
|
|
"audit-archive"
|
|
],
|
|
"result_route": {
|
|
"conformance": "gate-house",
|
|
"implementation_finding": "risk-nexus",
|
|
"specification_finding": "gate-house",
|
|
"harness_gap": "whitehat-security"
|
|
},
|
|
"routes": [],
|
|
"identities": {
|
|
"count": 0,
|
|
"role": "none until the owning surface names a test identity",
|
|
"broker_audience": "whitehat-asm/t-09"
|
|
},
|
|
"abort_telemetry": [
|
|
"kill_switch",
|
|
"scope_boundary",
|
|
"missing_known_bad_calibration",
|
|
"secret_value_observed"
|
|
]
|
|
}
|