The sealed digest passes the calibrated library probes. The recorded corpus shows no unsafe effect, and the zones and model-switch routes match the fixture. RISK-F-0015 and EMERGENT-WP-0002-T07 stay with their owners. Assistant: grok Assistant-Session: 01a10450-dda4-7253-91a9-b8dccb2f0173
115 lines
3.6 KiB
JSON
115 lines
3.6 KiB
JSON
{
|
|
"schema": "whitehat-offline-knowledge-review.v1",
|
|
"date": "2026-10-04",
|
|
"target_revision": "f65d0e64bc710eafb1dac4dd64b05516493d8c31",
|
|
"package_version": "0.2.6",
|
|
"package_digest": "8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02",
|
|
"authorization": "Whitehat RoE v0.2 sections 1 and 11: non-networked synthetic fixtures",
|
|
"independence": "Whitehat repository worker in a later session than WHITEHAT-WP-0009; shared workstation context; not an authenticated external principal or institutional assent.",
|
|
"source_status": {
|
|
"schema": "emergent.knowledge-check.v1",
|
|
"version": "0.2.6",
|
|
"package_digest": "8d1d6a9d4d07fec7b619618de7dfe2be2254c1790f85f4198c7fe19db9751c02",
|
|
"sources": {
|
|
"net-kingdom": "verified-files",
|
|
"gate-house": "verified-files",
|
|
"ops-warden": "verified-files",
|
|
"ops-mason": "verified-files",
|
|
"access-engine": "verified-files",
|
|
"security-canon": "verified-files",
|
|
"user-engine": "verified-files",
|
|
"tenant-engine": "verified-files",
|
|
"zone-engine": "verified-files",
|
|
"whitehat-security": "verified-files",
|
|
"kings-guard": "verified-files",
|
|
"secrets-engine": "verified-files",
|
|
"key-cape": "verified-files",
|
|
"approval-engine": "verified-files",
|
|
"informed-decision": "changed",
|
|
"audit-core": "verified-files",
|
|
"risk-nexus": "verified-files",
|
|
"info-tech-canon": "verified-files",
|
|
"ops-bridge": "verified-files",
|
|
"railiance-master": "verified-files",
|
|
"glas-harness": "verified-files",
|
|
"the-custodian": "verified-files",
|
|
"emergent-security": "verified-files",
|
|
"runbook-tutorials": "verified-files"
|
|
},
|
|
"live_state_verified": false,
|
|
"ok": false
|
|
},
|
|
"probes": [
|
|
{
|
|
"id": "orientation-is-not-authority",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "unapproved-audience",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "unknown-traversal-card",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "tenant-self-assertion",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "withdrawn-source-on-load",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "review-expired",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "tamper-before-load",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "tamper-after-load",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
},
|
|
{
|
|
"id": "withdrawal-after-load",
|
|
"known_bad": "fail",
|
|
"known_good": "pass",
|
|
"target": "pass"
|
|
}
|
|
],
|
|
"tamper_after_load": {
|
|
"original_digest_retained": true,
|
|
"synthetic_unsealed_content_returned": false,
|
|
"receipt_status": "raised",
|
|
"fail_closed": "release content changed; review and reseal"
|
|
},
|
|
"withdrawal_after_load": {
|
|
"fresh_instance_withholds": true,
|
|
"loaded_instance_returns_content": false,
|
|
"original_digest_retained": true,
|
|
"fail_closed": "release changed; reload the reviewed bundle"
|
|
},
|
|
"disposition": "0.2.6 library probes only; provider-route disposition is a separate record; no institutional assent",
|
|
"scope_limits": [
|
|
"No live traffic, credentials, provider calls, tenant data or target edits.",
|
|
"No provider resume, compaction, identity isolation or live boundary proof."
|
|
]
|
|
}
|