tegwick
95129d7a35
Encode fail-closed admission, target registrations, and a credential broker that never returns secret values. Calibrate audit-core shaped probes in-process. Send no packets and request no live credentials. Assistant: grok Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb
36 lines
1.4 KiB
JSON
36 lines
1.4 KiB
JSON
{
|
|
"schema_version": "whitehat-target/v1",
|
|
"target_id": "audit-core",
|
|
"posture_claim": "implemented E2; currently evidenced E1",
|
|
"attacker_model": "E2-authenticated-tenant-a",
|
|
"applicability": "applicable",
|
|
"applicability_reason": "audit-core binds each sender token to a tenant set at one choke point. Two ordinary tenant-scoped senders instantiate the E2 model without operator or database privilege.",
|
|
"approval_classes": ["live-e2"],
|
|
"adapter": "runners/audit_core_e2.py",
|
|
"probe_pack": "probe-packs/audit-core-e2.json",
|
|
"known_bad_calibration": "src/whitehat_security/audit_fixtures.py",
|
|
"fixture_lifecycle": {
|
|
"create": "append two synthetic events and one reserved absent id",
|
|
"delete": "named immutable audit fixtures retained by target contract unless the owner provides a delete",
|
|
"ids_are_synthetic": true
|
|
},
|
|
"egress": "http://audit-core.audit-core.svc.cluster.local:8080",
|
|
"routes": [
|
|
"GET /readyz",
|
|
"POST /v1/events",
|
|
"GET /v1/events/{event_id}",
|
|
"GET /v1/events?correlation_id={correlation_id}"
|
|
],
|
|
"identities": {
|
|
"count": 2,
|
|
"role": "ordinary tenant-scoped may_read/may_write fixture senders",
|
|
"ttl_seconds": 900,
|
|
"broker_audience": "whitehat-e2/audit-core"
|
|
},
|
|
"abort_telemetry": [
|
|
"p95_latency_ms",
|
|
"probe_attributable_5xx",
|
|
"unexpected_or_non_fixture_data",
|
|
"missing_attribution"
|
|
]
|
|
}
|