tegwick 481ed6add5 Add WHITEHAT-WP-0002 receipt example, CLI coverage, and abort records

Meantime polish while live E2 waits on a new trial. Example receipts carry
handles only. admit-plane --receipt is tested. Aborts can be queued without
being target assurance.

Assistant: grok
Assistant-Session: 01a02670-3345-76f2-a014-70fde8e2a2bb

2026-08-22 21:40:33 +02:00

1.5 KiB

Raw Blame History

id	type	title	domain	repo	status	owner	topic_slug	created	updated
WHITEHAT-WP-0002	workplan	Receipt admission example, CLI coverage, and abort records	infotech	whitehat-security	finished	net-kingdom	whitehat-security	2026-08-22	2026-08-22

WHITEHAT-WP-0002 — receipt admission and abort records

Goal

Close the gap that aborted WH-ENG-20260822-AUDIT-E2-02: operators need a checked-in value-safe receipt shape, a CLI path that issues a plane lease from it, and a way to record an abort without calling it target evidence.

This plan does not authorize a live trial. The next E2 run remains a new engagement under WHITEHAT-WP-0001.

Tasks

T01 — Example projection receipt

id: WHITEHAT-WP-0002-T01
status: done
priority: high

Checked-in example with no secret material, matching schemas/projection-receipt.schema.json. Operators copy it at window start instead of inventing a shape under the three-minute mint gate.

T02 — CLI coverage for `admit-plane --receipt`

id: WHITEHAT-WP-0002-T02
status: done
priority: high

Prove the CLI admits from a valid receipt, refuses secret material, and still fails closed without --receipt.

T03 — Abort records are not target assurance

id: WHITEHAT-WP-0002-T03
status: done
priority: medium

Allow evidence_class: abort so a zero-packet abort can be queued without being a Tenancy Posture artifact. Record WH-ENG-20260822-AUDIT-E2-02 that way.

Sequencing

T01 and T02 can proceed together. T03 is independent. None of this is a live run.

1.5 KiB Raw Blame History