{
  "manifest_version": "13.0",
  "cain_version": "13.0.0",
  "description": "CAIN Machine-Readable Discovery Manifest for AI Agents (Hosted Trust Fabric)",
  "published": "2026-09-14T00:00:00.000000+00:00",
  "product": "CAIN Trust Fabric 13.0 — The Trust Adaptation Engine",
  "role": "hosted-managed-trust-control-plane-and-enforcement-layer",
  "doctrine": "NO CHANGE IN THE TRUST ENVIRONMENT MAY SILENTLY INHERIT OLD TRUST.",
  "protocol_version": "13.0",
  "deployment_model": "hosted_managed_control_plane",
  "runtime_kernel": "CAIN Trust Fabric 13.0",
  
  "discovery": {
    "well_known": "/.well-known/cain.json",
    "openapi": "/openapi.json",
    "mcp_manifest": "/docs/mcp/manifest.json",
    "proof_index": "/proof/index.json",
    "bundle_root": "/proof/bundle/",
    "bundle_v13_root": "/proof/bundle/v13/"
  },
  
  "invariant_verification": {
    "total_invariants": 175,
    "status": "175/175 PASS",
    "adaptation_invariants": "INV-151 to INV-175 PASS",
    "machine_checkable_endpoint": "/api/v1/proof/invariants",
    "drift_status_endpoint": "/api/v1/proof/drift",
    "bundle_invariants_file": "/proof/bundle/v13/CAIN_13_INVARIANTS.json"
  },
  
  "trust_adaptation_engine": {
    "status": "ACTIVE_ENFORCING",
    "environmental_dimensions": 25,
    "causal_attribution_classes": 10,
    "governed_assumptions": 18,
    "redteam_vectors_tested": 100,
    "redteam_blocked_rate": "100%",
    "fail_closed_guarantee": true,
    "endpoints": {
      "status": "/api/v1/adapt/status",
      "detect": "/api/v1/adapt/detect",
      "attribute": "/api/v1/adapt/attribute",
      "impact": "/api/v1/adapt/impact",
      "assumptions": "/api/v1/adapt/assumptions",
      "plan": "/api/v1/adapt/plan",
      "sandbox": "/api/v1/adapt/sandbox",
      "redteam": "/api/v1/adapt/redteam",
      "claims": "/api/v1/adapt/claims"
    }
  },
  
  "engineering_and_security": {
    "engineering_overview": "/engineering",
    "daily_log": "/engineering/daily",
    "weekly_log": "/engineering/weekly",
    "security_overview": "/security",
    "threat_model": "/security/threat-model",
    "red_team": "/security/red-team",
    "security_advisories": "/security/advisories",
    "researcher_briefing": "/security/researcher",
    "agentic_systems_guide": "/docs/agentic-systems"
  },
  
  "proof_centers": {
    "canonical_proof": "/proof",
    "proof_index": "/proof/index.json",
    "public_truth_audit": "/proof/bundle/v13/CAIN_13_PUBLIC_TRUTH_AUDIT.json",
    "manifest": "/proof/bundle/v13/CAIN_13_MANIFEST.json",
    "status": "/proof/bundle/v13/CAIN_13_STATUS.json"
  },
  
  "what_is_not_proven": {
    "hardware_enclaves": "Intel SGX / AMD SEV are SIMULATION_ONLY in cloud VMs lacking hardware enclave dev nodes (/dev/sgx_enclave).",
    "byzantine_tolerance": "Cluster BFT consensus is mathematically and operationally bounded to f=1 in N=4 node mesh.",
    "network_assumptions": "Consensus convergence requires partial synchrony (Delta <= 2000ms); asynchronous partitions pause finality fail-closed."
  },
  
  "api_endpoints": {
    "decision": {
      "method": "POST",
      "path": "/api/v1/decision",
      "content_type": "application/json",
      "description": "Submit action for CAIN decision"
    },
    "proof_test": {
      "method": "POST",
      "path": "/api/v1/proof/test",
      "content_type": "application/json",
      "description": "Run synthetic proof test"
    },
    "evidence": {
      "method": "GET",
      "path": "/api/v1/proof/evidence/{evidence_id}",
      "description": "Retrieve evidence by ID"
    },
    "integrity": {
      "method": "GET",
      "path": "/api/v1/proof/integrity/{evidence_id}",
      "description": "Verify evidence integrity"
    },
    "public_key": {
      "method": "GET",
      "path": "/api/v1/proof/public-key",
      "description": "Get public verification key"
    },
    "verify_signature": {
      "method": "POST",
      "path": "/api/v1/proof/verify-signature",
      "description": "Verify evidence signature"
    },
    "conformance": {
      "method": "GET",
      "path": "/api/v1/proof/invariants",
      "description": "Get invariant conformance results (175 formal invariants passed)"
    },
    "health": {
      "method": "GET",
      "path": "/health",
      "description": "Get CAIN health status"
    },
    "sandbox_simulate": {
      "method": "POST",
      "path": "/api/v1/sandbox/simulate",
      "description": "Simulate live trust pipeline and generate instant SIEM telemetry"
    },
    "telemetry_stream": {
      "method": "GET",
      "path": "/api/v1/sandbox/telemetry/stream",
      "description": "Server-Sent Events (SSE) live stream of CEF, LEEF 2.0, and signed JSON"
    },
    "compliance_eu_ai_act": {
      "method": "POST",
      "path": "/api/v1/compliance/audit/eu-ai-act",
      "description": "Audit high-risk AI system for EU AI Act Article 12 & 14 conformance"
    },
    "compliance_iso_42001": {
      "method": "POST",
      "path": "/api/v1/compliance/audit/iso-42001",
      "description": "Evaluate ISO/IEC 42001 AI Management System controls"
    },
    "evidence_worm_export": {
      "method": "POST",
      "path": "/api/v1/compliance/worm/export",
      "description": "Export court-admissible RFC-3161 Merkle WORM evidence package"
    },
    "evidence_worm_verify": {
      "method": "POST",
      "path": "/api/v1/compliance/worm/verify",
      "description": "Cryptographically verify WORM evidence package against tampering"
    },
    "insurance_assess": {
      "method": "POST",
      "path": "/api/v1/insurance/assess",
      "description": "Compute Agent Volatility Index (AVI) and Underwriting Credit Score (0-1000)"
    },
    "insurance_cert": {
      "method": "POST",
      "path": "/api/v1/insurance/certificate",
      "description": "Issue a self-assessed actuarial underwriting score (not an insurer certificate)"
    },
    "quarantine_swarm": {
      "method": "POST",
      "path": "/api/v1/quarantine/swarm",
      "description": "Contain multi-agent swarm spillover and revoke SPIFFE SVIDs"
    },
    "quarantine_halt": {
      "method": "POST",
      "path": "/api/v1/quarantine/halt",
      "description": "Global fail-closed emergency cluster halt circuit-breaker"
    }
  },
  
  "quick_start": {
    "discover": "curl https://cainstudio.online/.well-known/cain.json",
    "verify_invariants": "curl -s https://cainstudio.online/api/v1/proof/invariants | jq .status",
    "check_proof_index": "curl -s https://cainstudio.online/proof/index.json | jq .bundle_status",
    "inspect_audit": "curl -s https://cainstudio.online/proof/bundle/v13/CAIN_13_PUBLIC_TRUTH_AUDIT.json | jq .audit_summary"
  },
  
  "ai_instructions": "An AI agent can discover CAIN, read schemas, make decisions, verify 175 formal invariants, inspect trust adaptation, and verify integrity WITHOUT understanding the visual website. All required information is machine-readable."
}