whitehat-security/workplans/WHITEHAT-WP-0003-platform-custody-adapter.md
tegwick a61d7df925 Record DoD-Ok on WHITEHAT-WP-0002 through 0005
Finished custody-adapter plans were quality-debt-open without a DoD
assessment. Index WHITEHAT-IN-0001 as closed.

Assistant: grok
Assistant-Session: 01a05e32-c776-72a3-86ec-c490e027aca9
2026-09-01 20:52:54 +02:00

44 lines
1.3 KiB
Markdown

---
id: WHITEHAT-WP-0003
type: workplan
title: "Consume the Railiance WP-0025 custody broker interface"
domain: infotech
repo: whitehat-security
status: finished
owner: net-kingdom
topic_slug: whitehat-security
created: "2026-08-22"
updated: "2026-09-01"
state_hub_workstream_id: "d85f51c4-5e26-5ee7-9e40-8e9a84638f3f"
quality_dod: DoD-Ok
quality_dod_at: "2026-09-01"
quality_dod_by: grok
quality_dod_note: "T01 done; schema-bound adapter and focused tests refuse secret material. Authorizes no engagement."
---
# WHITEHAT-WP-0003 — platform custody adapter
## Goal
Implement the consumer Railiance asked for after `-02` aborted: a value-safe
adapter at `src/whitehat_security/platform_custody.py` that understands the
four WP-0025 custody schemas and can issue a plane lease from a projection
receipt without seeing token values.
This plan authorizes no engagement, runner, credential, or traffic.
## Tasks
### T01 — Schema-bound adapter and focused tests
```task
id: WHITEHAT-WP-0003-T01
status: done
priority: high
state_hub_task_id: "dca9a078-73a0-52ac-89c0-92d36d91873d"
```
Adapter plus `tests/test_platform_custody_adapter.py`. Cleanup receipts can
acknowledge a lease. Secret material is refused. `admit-plane --receipt`
selects this adapter when the document uses
`railiance.custody-projection-receipt`.