Skip to content

[External Validation] audit/audit.third_party_review - audit-owner #22

Description

@tradecatlabs

External Validation Work Item

  • Work item: external-work.fd47f5baca785f0c
  • Domain: audit
  • Category: audit.third_party_review
  • Owner: audit-owner
  • Priority: P0
  • Occurrences: external.63238d4c0252a310, external.6ea12ea4a8ebc3b2, external.97fe5f589227934a, external.a5f07948ecd20f47

Required Credentials

  • redacted audit handoff package
  • signed review result
  • third-party auditor access

Required Evidence

  • audit findings tracked or accepted
  • independent audit result attached

Operator Commands

  • bash scripts/audit-handoff-dry-run.sh --bundle-json <audit-handoff-json> --bundle-markdown <audit-handoff-md> --output-dir <dry-run-dir>
  • bash scripts/audit-handoff-dry-run.sh --bundle-json <bundle> --output-dir <dir>
  • bash scripts/audit-handoff.sh --output-dir <audit-handoff-dir>
  • bash scripts/external-validation-proof-ref-gate.sh --work-queue-json <work-queue-json> --evidence-json <proof-ref-bundle-json> --output-json <proof-ref-gate-json>

Proof Ref Template

  • Pattern: evidence://external-validation/audit-third-party-review/<run-id>
  • Artifact hash: sha256:<64 lowercase hex artifact digest>
  • Verification command: bash scripts/external-validation-proof-ref-gate.sh --work-queue-json <work-queue-json> --evidence-json <proof-ref-bundle-json> --output-json <proof-ref-gate-json>

Blocking Items

  • category_live_evidence_missing
  • category_live_pending
  • proof_ref_missing
  • stale_owner_pending

Closure Condition

Independent reviewer signs off the redacted audit package and all open external evidence items remain listed.

Non-Claims

  • This issue does not prove live validation has passed.
  • Do not paste token, secret, DSN, endpoint URL, chat id, user input, report body or production logs.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions