{
 "claims": [
  {
   "artifacts": [
    {
     "file": "pbft-evolution2-2026-09-24/PBFT_QC_BUNDLE.json",
     "sha256": "f96088a8edf710b38b3cf22a7c25dd04e2758f7ff7ae9583b8eddf4b04cb2dde",
     "urls": [
      "https://cainstudio.online/proof/bundle/pbft-evolution2-2026-09-24/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/pbft-evolution2-2026-09-24/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/pbft-evolution2-2026-09-24/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "pbft-evolution2-2026-09-24/verify_pbft_qc_bundle.py.txt",
     "sha256": "ba452ce42528f11f7f5235727a65cae25a34072bc52b4711fd72581615d06009",
     "urls": [
      "https://cainstudio.online/proof/bundle/pbft-evolution2-2026-09-24/verify_pbft_qc_bundle.py.txt",
      "https://mcpgate.online/proof/bundle/pbft-evolution2-2026-09-24/verify_pbft_qc_bundle.py.txt",
      "https://clawx.click/evidence/pbft-evolution2-2026-09-24/verify_pbft_qc_bundle.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-PBFT-QC",
   "limits": "disposable cluster on one host",
   "reproduce": [
    "https://clawx.click/evidence/pbft-evolution2-2026-09-24/REPRODUCE.txt"
   ],
   "statement": "A 4-node CAIN-42 PBFT cluster produced authentic quorum certificates (>= 3 of 4 pinned Ed25519 members) with an identical decision chain on every node across a primary failover.",
   "status": "VERIFIED",
   "verify": "python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json  (or index.html in a browser)"
  },
  {
   "artifacts": [
    {
     "file": "pbft-evolution3-2026-09-24/PBFT_QC_BUNDLE.json",
     "sha256": "43e1c61004d3d53a1f76d96f72a7241ef59793a2f77d9beda5f6b40559e9c9a4",
     "urls": [
      "https://cainstudio.online/proof/bundle/pbft-evolution3-2026-09-24/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/pbft-evolution3-2026-09-24/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/pbft-evolution3-2026-09-24/PBFT_QC_BUNDLE.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-FAST-PATH",
   "limits": "bounded model (single slot, 3 views); not deployed live",
   "reproduce": [
    "https://clawx.click/evidence/pbft-evolution3-2026-09-24/REPRODUCE.txt"
   ],
   "statement": "The Evolution 3 fast path commits only with all 4 members' votes and its view-change rule was model-checked (the naive rule was shown unsafe); a real run produced FAST_COMMIT_QCs that verify.",
   "status": "VERIFIED",
   "verify": "python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json"
  },
  {
   "artifacts": [],
   "evidence_level": 2,
   "id": "C42-FAST-PATH-LATENCY",
   "limits": "negative result; host CPU-bound",
   "reproduce": [],
   "statement": "The fast path did NOT produce a measurable latency improvement on this host (paired A/B, 95% CI includes 0).",
   "status": "BENCHMARKED",
   "verify": "scripts/cain42_bft/pbft_ab_bench.py (results in the certification)"
  },
  {
   "artifacts": [
    {
     "file": "dag-evolution4-2026-09-24/DAG_CLUSTER_EVIDENCE.json",
     "sha256": "10c08dab4e70a7a5782b9aafe92e7c88e63038085cce3a8a143abb660797bc09",
     "urls": [
      "https://cainstudio.online/proof/bundle/dag-evolution4-2026-09-24/DAG_CLUSTER_EVIDENCE.json",
      "https://mcpgate.online/proof/bundle/dag-evolution4-2026-09-24/DAG_CLUSTER_EVIDENCE.json",
      "https://clawx.click/evidence/dag-evolution4-2026-09-24/DAG_CLUSTER_EVIDENCE.json"
     ]
    },
    {
     "file": "dag-evolution4-2026-09-24/verify_dag_bundle.py.txt",
     "sha256": "f544555b9275d412bdd2b459cf780d351058b3755792f44dfb7f8377a5d58fd5",
     "urls": [
      "https://cainstudio.online/proof/bundle/dag-evolution4-2026-09-24/verify_dag_bundle.py.txt",
      "https://mcpgate.online/proof/bundle/dag-evolution4-2026-09-24/verify_dag_bundle.py.txt",
      "https://clawx.click/evidence/dag-evolution4-2026-09-24/verify_dag_bundle.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-DAG-ORDER",
   "limits": "disposable cluster; ordering bias removed in Evolution 5 (measured), fairness beyond position bias not measured",
   "reproduce": [
    "https://clawx.click/evidence/dag-evolution4-2026-09-24/REPRODUCE.txt"
   ],
   "statement": "DAG data is availability-certified (3 of 4), anchored only through PBFT, and ordered identically on all 4 nodes including a crash-restarted one; the verifier recomputes the order.",
   "status": "VERIFIED",
   "verify": "python3 verify_dag_bundle.py DAG_CLUSTER_EVIDENCE.json"
  },
  {
   "artifacts": [
    {
     "file": "mcpgate-live-2026-09-27/manifest.json",
     "sha256": "8196297a5ae5ac11dc3d44f4a27618a5631699ed5d2dd40056b76eef47f66ca6",
     "urls": [
      "https://cainstudio.online/proof/bundle/mcpgate-live-2026-09-27/manifest.json",
      "https://mcpgate.online/proof/bundle/mcpgate-live-2026-09-27/manifest.json",
      "https://clawx.click/evidence/mcpgate-live-2026-09-27/manifest.json"
     ]
    },
    {
     "file": "mcpgate-live-2026-09-27/calls.json",
     "sha256": "d841d64bd89933e273487790396ffec5a930bf9c668348248ade276f19443cbf",
     "urls": [
      "https://cainstudio.online/proof/bundle/mcpgate-live-2026-09-27/calls.json",
      "https://mcpgate.online/proof/bundle/mcpgate-live-2026-09-27/calls.json",
      "https://clawx.click/evidence/mcpgate-live-2026-09-27/calls.json"
     ]
    },
    {
     "file": "mcpgate-live-2026-09-27/gate_proofs.json",
     "sha256": "bbba0255296226ee3bf5d0856e49a20f6977ee5993f3d7cfdde9f45f3cf8d644",
     "urls": [
      "https://cainstudio.online/proof/bundle/mcpgate-live-2026-09-27/gate_proofs.json",
      "https://mcpgate.online/proof/bundle/mcpgate-live-2026-09-27/gate_proofs.json",
      "https://clawx.click/evidence/mcpgate-live-2026-09-27/gate_proofs.json"
     ]
    },
    {
     "file": "mcpgate-live-2026-09-27/mcp_server_executed.json",
     "sha256": "460a1fb18f541c589126001227ec36760a7ba9db1347aa13b1cbc63125bb6747",
     "urls": [
      "https://cainstudio.online/proof/bundle/mcpgate-live-2026-09-27/mcp_server_executed.json",
      "https://mcpgate.online/proof/bundle/mcpgate-live-2026-09-27/mcp_server_executed.json",
      "https://clawx.click/evidence/mcpgate-live-2026-09-27/mcp_server_executed.json"
     ]
    },
    {
     "file": "cain42-proof-package-2026-09-24/manifest.json",
     "sha256": "c50397779c5aed594357a3f295362b2c5c69f074fd7f096a23db2e3d995f0b26",
     "urls": [
      "https://cainstudio.online/proof/bundle/cain42-proof-package-2026-09-24/manifest.json",
      "https://mcpgate.online/proof/bundle/cain42-proof-package-2026-09-24/manifest.json",
      "https://clawx.click/evidence/cain42-proof-package-2026-09-24/manifest.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-MCPGATE-ENFORCES",
   "limits": "self-attested run by the operator; the downstream is a sandbox key-value MCP server; cainstudio.online does not route customer tool calls through this gate",
   "reproduce": [
    "https://clawx.click/evidence/cain42-proof-package-2026-09-24/REPRODUCE.txt",
    "https://clawx.click/evidence/mcpgate-live-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "MCPGate lets a tool call run only with a PBFT-committed authorization bound to the exact action, scope, identity, security context, expiry and single use. On the LIVE 4-region cluster cain-mr-02, through the MCPGate HTTP proxy to a separate MCP server process: 5 authorized calls ran (per the server's own execution log) and 12 attacks were blocked, each with a signed denial returned to the caller (replay, action and tool substitution, capability escalation, identity substitution, context drift, forged QC, forged body, post-consensus mutation, another cluster's certificate, no authorization, expiry).",
   "status": "VERIFIED",
   "verify": "python3 verifiers/cain_proof_verify.py .   (see mcpgate-live-2026-09-27/REPRODUCE.txt)"
  },
  {
   "artifacts": [
    {
     "file": "cain42-agent-proof-package-2026-09-24/manifest.json",
     "sha256": "9ccb5e68a06d51df8c5d02e2c0fd520a627ed09333523f750a8c6f5636a9677e",
     "urls": [
      "https://cainstudio.online/proof/bundle/cain42-agent-proof-package-2026-09-24/manifest.json",
      "https://mcpgate.online/proof/bundle/cain42-agent-proof-package-2026-09-24/manifest.json",
      "https://clawx.click/evidence/cain42-agent-proof-package-2026-09-24/manifest.json"
     ]
    },
    {
     "file": "cain42-agent-proof-package-2026-09-24/agents.json",
     "sha256": "f10ea2027694d51543995f3668b087dd87585b2df2a9f4e92bb04d0b743e0998",
     "urls": [
      "https://cainstudio.online/proof/bundle/cain42-agent-proof-package-2026-09-24/agents.json",
      "https://mcpgate.online/proof/bundle/cain42-agent-proof-package-2026-09-24/agents.json",
      "https://clawx.click/evidence/cain42-agent-proof-package-2026-09-24/agents.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-AGENTS-CANNOT-SELF-AUTHORIZE",
   "limits": "scripted agents, not LLMs; attestation SIMULATED; in-process",
   "reproduce": [
    "https://clawx.click/evidence/cain42-agent-proof-package-2026-09-24/REPRODUCE.txt"
   ],
   "statement": "Agents propose; only PBFT authorizes. Plan mutation, model update or tool swap after consensus forces reauthorization; undeclared actions, impersonation, replay, forged trajectories, delegation escalation and aggregate-policy (salami) attacks are blocked.",
   "status": "SIMULATED",
   "verify": "python3 verifiers/cain_proof_verify.py ."
  },
  {
   "artifacts": [
    {
     "file": "final-2026-09-24/CAIN42_FINAL_INVARIANTS_RUN.json",
     "sha256": "cdf56006ccb193195e9ccdf765620ff78be8b67a52e4894c881368874265d2e9",
     "urls": [
      "https://cainstudio.online/proof/bundle/final-2026-09-24/CAIN42_FINAL_INVARIANTS_RUN.json",
      "https://mcpgate.online/proof/bundle/final-2026-09-24/CAIN42_FINAL_INVARIANTS_RUN.json",
      "https://clawx.click/evidence/final-2026-09-24/CAIN42_FINAL_INVARIANTS_RUN.json"
     ]
    }
   ],
   "evidence_level": 4,
   "id": "C42-INVARIANTS",
   "limits": "executable tests, not formal verification; see each invariant's coverage/gap",
   "reproduce": [],
   "statement": "28 executable CAIN-42 invariants (I001-I028: no quorum -> no consensus -> no authorization -> no execution; agents, memory, DAG, delegation, trust and AI predictions cannot create authority; replay, expiry, substitution, tampering rejected) pass on the real code; 22 with full coverage, 6 partial with the gap named.",
   "status": "TESTED",
   "verify": "scripts/cain42_bft/cain42_invariants.py"
  },
  {
   "artifacts": [
    {
     "file": "final-2026-09-24/E6_TRAJECTORY_LAB.json",
     "sha256": "3ad3cadaf3e820adb78731ccfcefdd336bbc3467f0573f1be74ea9d22765c460",
     "urls": [
      "https://cainstudio.online/proof/bundle/final-2026-09-24/E6_TRAJECTORY_LAB.json",
      "https://mcpgate.online/proof/bundle/final-2026-09-24/E6_TRAJECTORY_LAB.json",
      "https://clawx.click/evidence/final-2026-09-24/E6_TRAJECTORY_LAB.json"
     ]
    }
   ],
   "evidence_level": 2,
   "id": "C42-1000-TRAJECTORIES",
   "limits": "in-process; scripted agents",
   "reproduce": [],
   "statement": "1,000 agent trajectories (9 kinds incl. 380 attacks) all ended as expected; all 620 allowed actions carry complete, re-verified proof chains; a 1,000-step trajectory accepted 0 stale authorizations.",
   "status": "SIMULATED",
   "verify": "scripts/cain42_bft/agentic_trajectory_lab.py"
  },
  {
   "artifacts": [
    {
     "file": "final-2026-09-24/E5_ORDERING_FAIRNESS.json",
     "sha256": "32204ce929ad2c04451c67be344ced464c71e9372c551a9906692771819766e6",
     "urls": [
      "https://cainstudio.online/proof/bundle/final-2026-09-24/E5_ORDERING_FAIRNESS.json",
      "https://mcpgate.online/proof/bundle/final-2026-09-24/E5_ORDERING_FAIRNESS.json",
      "https://clawx.click/evidence/final-2026-09-24/E5_ORDERING_FAIRNESS.json"
     ]
    }
   ],
   "evidence_level": 2,
   "id": "C42-ORDERING-FAIRNESS",
   "limits": "position bias only; censorship and economic bias not measured",
   "reproduce": [],
   "statement": "DAG within-round order is seeded by committed PBFT history: validator-position bias measured before (chi-square 542) and after (1.75).",
   "status": "BENCHMARKED",
   "verify": "scripts/cain42_bft/dag_fairness_lab.py"
  },
  {
   "artifacts": [],
   "evidence_level": 1,
   "id": "C42-LIVE-CLUSTER-EVO2",
   "limits": "live cluster API is private; its first two decisions predate certificates",
   "reproduce": [],
   "statement": "The live cain-vc cluster runs the Evolution 2 engine (upgraded node by node, state preserved).",
   "status": "UNVERIFIED",
   "verify": "not publicly reachable"
  },
  {
   "artifacts": [],
   "evidence_level": 2,
   "id": "C42-PRIVACY-FIREWALL",
   "limits": "pattern-based; not a guarantee against every leak class",
   "reproduce": [],
   "statement": "Every published evidence bundle passes the public-evidence privacy firewall (keys, tokens, credentials, private IPs, internal URLs, server paths, source).",
   "status": "TESTED",
   "verify": "scripts/cain42_bft/public_evidence_firewall.py"
  },
  {
   "artifacts": [
    {
     "file": "four-server-cluster-2026-09-27/PBFT_QC_BUNDLE.json",
     "sha256": "0ed32a92d4c58c3517679c6c0ca7c318a45960c01b5b63e7ce87db677b6a3b71",
     "urls": [
      "https://cainstudio.online/proof/bundle/four-server-cluster-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/four-server-cluster-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/four-server-cluster-2026-09-27/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "four-server-cluster-2026-09-27/verify_host_loss_bundle.py.txt",
     "sha256": "0f26f9c82d40d9c3da44d878ee25ecfab59413475765515475a314019a15b6cf",
     "urls": [
      "https://cainstudio.online/proof/bundle/four-server-cluster-2026-09-27/verify_host_loss_bundle.py.txt",
      "https://mcpgate.online/proof/bundle/four-server-cluster-2026-09-27/verify_host_loss_bundle.py.txt",
      "https://clawx.click/evidence/four-server-cluster-2026-09-27/verify_host_loss_bundle.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-INDEPENDENT-FAILURE-DOMAINS",
   "limits": "one provider (Vultr) and one operator: a provider-wide outage or operator compromise is not covered",
   "reproduce": [
    "https://clawx.click/evidence/four-server-cluster-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "Consensus runs on independent geographic failure domains: cain-mr-02 has 4 replicas on 4 servers in 4 regions (Atlanta, Los Angeles, Miami, Silicon Valley), one each; every server was taken offline in turn and the cluster kept committing, and with two down it refused to commit.",
   "status": "VERIFIED",
   "verify": "python3 verify_host_loss_bundle.py PBFT_QC_BUNDLE.json"
  },
  {
   "artifacts": [],
   "evidence_level": 0,
   "id": "C42-MULTI-PROVIDER",
   "limits": "every server is on Vultr; needs a second provider account",
   "reproduce": [],
   "statement": "Replicas on more than one infrastructure provider.",
   "status": "NOT_IMPLEMENTED",
   "verify": "-"
  },
  {
   "artifacts": [
    {
     "file": "multi-region-cluster-2026-09-26/PBFT_QC_BUNDLE.json",
     "sha256": "393d88099d4d62686abff3bf0da841808741717a0978626b04d34e678f35fd4b",
     "urls": [
      "https://cainstudio.online/proof/bundle/multi-region-cluster-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/multi-region-cluster-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/multi-region-cluster-2026-09-26/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "hourly-proof-mr02/proof-000000.json",
     "sha256": "cfc616620eae2ddd7371b0393ca269edb07eb6cb704f17deea9be51d4bba9847",
     "urls": [
      "https://cainstudio.online/proof/bundle/hourly-proof-mr02/proof-000000.json",
      "https://mcpgate.online/proof/bundle/hourly-proof-mr02/proof-000000.json",
      "https://clawx.click/evidence/hourly-proof-mr02/proof-000000.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-LIVE-MULTI-REGION",
   "limits": "region placement is stated by the operator",
   "reproduce": [
    "https://clawx.click/evidence/hourly-proof-mr02/REPRODUCE.txt",
    "https://clawx.click/evidence/multi-region-cluster-2026-09-26/REPRODUCE.txt"
   ],
   "statement": "Two live multi-region clusters: cain-mr-01 (4 replicas, 3 regions, WireGuard) and cain-mr-02 (4 servers, 4 regions); each publishes a 30-minute signed proof of its live state, and every decision carries signatures from at least 2 regions.",
   "status": "VERIFIED",
   "verify": "python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json; python3 verify_hourly_proofs.py <base>"
  },
  {
   "artifacts": [
    {
     "file": "partition-test-2026-09-26/PBFT_QC_BUNDLE.json",
     "sha256": "1f1d7d4a3af89f9f710aedc574a191048a5c1d7655513c185443f4135ea478c8",
     "urls": [
      "https://cainstudio.online/proof/bundle/partition-test-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/partition-test-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/partition-test-2026-09-26/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "asymmetric-partition-2026-09-27/PBFT_QC_BUNDLE.json",
     "sha256": "3618882fe6ed8653886a92daed66009ec5d08e64c46476891f245eb70cdf97e6",
     "urls": [
      "https://cainstudio.online/proof/bundle/asymmetric-partition-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/asymmetric-partition-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/asymmetric-partition-2026-09-27/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "byzantine-test-2026-09-26/PBFT_QC_BUNDLE.json",
     "sha256": "940ed6cf99124c78d57d1c49f0813a5b5dc061390303a90d8a8cce646a874994",
     "urls": [
      "https://cainstudio.online/proof/bundle/byzantine-test-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/byzantine-test-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/byzantine-test-2026-09-26/PBFT_QC_BUNDLE.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-PARTITION-BYZANTINE",
   "limits": "partitions: whole-host link loss and complete one-way loss (deaf replica, one-way link, mute replica) for 60 s; not flapping links, partial loss, delay or duplication; Byzantine tests on a disposable cluster with the same placement; f=1, two behaviours",
   "reproduce": [
    "https://clawx.click/evidence/asymmetric-partition-2026-09-27/REPRODUCE.txt",
    "https://clawx.click/evidence/byzantine-test-2026-09-26/REPRODUCE.txt",
    "https://clawx.click/evidence/partition-test-2026-09-26/REPRODUCE.txt"
   ],
   "statement": "Live network-partition tests (isolated host commits nothing; 2|2 split commits nothing on either side; agreement within ~3 s of heal) one-way (asymmetric) partitions on the 4-server cluster (deaf replica, one-way link, mute replica: commits continued, identical chains after each heal), and Byzantine tests on the production image (forged votes rejected; equivocating primary proven from its own signatures, quarantined and replaced).",
   "status": "VERIFIED",
   "verify": "python3 verify_pbft_qc_bundle.py / verify_byzantine_bundle.py"
  },
  {
   "artifacts": [
    {
     "file": "degraded-network-2026-09-27/PBFT_QC_BUNDLE.json",
     "sha256": "405e189d2ab18bbb435f10380174afc2db354d45f062ac4fe663ee2448f2d562",
     "urls": [
      "https://cainstudio.online/proof/bundle/degraded-network-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/degraded-network-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/degraded-network-2026-09-27/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "degraded-network-948b189-2026-09-27/PBFT_QC_BUNDLE.json",
     "sha256": "401686a4a9ad475a09f786d02760b8871336c3da61cc9bfd340b12d3e270f9f9",
     "urls": [
      "https://cainstudio.online/proof/bundle/degraded-network-948b189-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/degraded-network-948b189-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/degraded-network-948b189-2026-09-27/PBFT_QC_BUNDLE.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-DEGRADED-NETWORK",
   "limits": "VERIFIED is for safety only; throughput under loss is a measured weakness, not a pass; one impairment profile, one client host",
   "reproduce": [
    "https://clawx.click/evidence/degraded-network-2026-09-27/REPRODUCE.txt",
    "https://clawx.click/evidence/degraded-network-948b189-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "Safety under a degraded network: with 10% packet loss, 120 +/- 40 ms delay, 5% duplication and reordering on all four replicas' traffic of the live 4-server cluster for 4 minutes, no fork (identical decision chains on all four, 341 certificates each). Liveness degraded sharply: 0.16 commits/s under the impairment versus 1.76/s before (39 of 61 writes committed within the client's 30 s timeout; p95 7173.9 ms), and fully recovered after (2.02/s, p95 644.0 ms). Re-run after engine 948b189 (backoff resets only on progress): 44 of 62 committed, 0.18/s, view changes cut from 14 to at most 6; throughput did not improve beyond noise, so the view-change storm was not the bottleneck. Safety held again.",
   "status": "VERIFIED",
   "verify": "python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json"
  },
  {
   "artifacts": [
    {
     "file": "storage-loss-drill-2026-09-27/PBFT_QC_BUNDLE.json",
     "sha256": "987c53f1dc8af84aa8243e08a6d0b1e3661e6d774adf53055ef91651b6bed74d",
     "urls": [
      "https://cainstudio.online/proof/bundle/storage-loss-drill-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/storage-loss-drill-2026-09-27/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/storage-loss-drill-2026-09-27/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "restore-drill-2026-09-26/PBFT_QC_BUNDLE.json",
     "sha256": "94162b7304d9484402c253dcdb881bc30665150a9cd0845d213eb4f3e3a30969",
     "urls": [
      "https://cainstudio.online/proof/bundle/restore-drill-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://mcpgate.online/proof/bundle/restore-drill-2026-09-26/PBFT_QC_BUNDLE.json",
      "https://clawx.click/evidence/restore-drill-2026-09-26/PBFT_QC_BUNDLE.json"
     ]
    },
    {
     "file": "restore-validation/validation-2026-09-27.json",
     "sha256": "e6f9a8811e14bf880ba09ef6842a271ba89d3340932ee74e1be374bb4ed8bc8c",
     "urls": [
      "https://cainstudio.online/proof/bundle/restore-validation/validation-2026-09-27.json",
      "https://mcpgate.online/proof/bundle/restore-validation/validation-2026-09-27.json",
      "https://clawx.click/evidence/restore-validation/validation-2026-09-27.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-DISASTER-RECOVERY",
   "limits": "same provider; backups not encrypted at rest (they hold consensus data that is public by design; identity keys are never backed up); loss of 3 of 4 not drilled; the daily validation checks restorability of every off-host backup, it does not restore into a running replica",
   "reproduce": [
    "https://clawx.click/evidence/restore-drill-2026-09-26/REPRODUCE.txt",
    "https://clawx.click/evidence/restore-validation/REPRODUCE.txt",
    "https://clawx.click/evidence/storage-loss-drill-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "Disaster recovery on the live clusters: two replicas lost their storage at once and were rebuilt only from off-host backups in other regions (0 of 4 writes committed while quorum was lost; 0 decisions lost; identical height and state 10.3 s after restart); a single replica restored from a snapshot in 8.3 s under writes. Hourly backups of both clusters are copied to another region; every day each replica's newest off-host backup is proven to be a quorum-signed prefix of the live history.",
   "status": "VERIFIED",
   "verify": "python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json; daily: python3 verify_restore_validation.py <latest.json> --key <evidence-root.pub.json>"
  },
  {
   "artifacts": [
    {
     "file": "rollback-drill-2026-09-26/ROLLBACK.json",
     "sha256": "cdf5e71eadcdd18ff55eca385990ff7ac1f3f07e2b3f94f85641a960760a76de",
     "urls": [
      "https://cainstudio.online/proof/bundle/rollback-drill-2026-09-26/ROLLBACK.json",
      "https://mcpgate.online/proof/bundle/rollback-drill-2026-09-26/ROLLBACK.json",
      "https://clawx.click/evidence/rollback-drill-2026-09-26/ROLLBACK.json"
     ]
    }
   ],
   "evidence_level": 3,
   "id": "C42-ROLLBACK",
   "limits": "both engines share one storage format",
   "reproduce": [],
   "statement": "Live rollback to the previous engine and forward again, one replica at a time with the primary last; every replica caught up in 10-14 s, cluster HEALTHY 4/4 after each direction.",
   "status": "VERIFIED",
   "verify": "compare the per-step status in ROLLBACK.json"
  },
  {
   "artifacts": [
    {
     "file": "release-cain-mr-02-948b189/RELEASE_MANIFEST.json",
     "sha256": "bfbfcaf45ea8622f75a459fc516803efa878bf713a5f138255e3635ffcc95f89",
     "urls": [
      "https://cainstudio.online/proof/bundle/release-cain-mr-02-948b189/RELEASE_MANIFEST.json",
      "https://mcpgate.online/proof/bundle/release-cain-mr-02-948b189/RELEASE_MANIFEST.json",
      "https://clawx.click/evidence/release-cain-mr-02-948b189/RELEASE_MANIFEST.json"
     ]
    },
    {
     "file": "release-cain-mr-02-948b189/verify_release_manifest.py.txt",
     "sha256": "4353e1d0c31b2b50248c3c531ce20825f82eb90ee66223331932745719a7a0ec",
     "urls": [
      "https://cainstudio.online/proof/bundle/release-cain-mr-02-948b189/verify_release_manifest.py.txt",
      "https://mcpgate.online/proof/bundle/release-cain-mr-02-948b189/verify_release_manifest.py.txt",
      "https://clawx.click/evidence/release-cain-mr-02-948b189/verify_release_manifest.py.txt"
     ]
    },
    {
     "file": "release-cain-mr-02-521f84c/RELEASE_MANIFEST.json",
     "sha256": "284998cc743ded062fd6845933c3beec2ac75716642da3069347e0824e99eb6c",
     "urls": [
      "https://cainstudio.online/proof/bundle/release-cain-mr-02-521f84c/RELEASE_MANIFEST.json",
      "https://mcpgate.online/proof/bundle/release-cain-mr-02-521f84c/RELEASE_MANIFEST.json",
      "https://clawx.click/evidence/release-cain-mr-02-521f84c/RELEASE_MANIFEST.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-REPRODUCIBLE-RELEASE",
   "limits": "source not published: the rebuild is reproducible by the operator; outsiders can check the manifest signature and digests",
   "reproduce": [],
   "statement": "The 4-server cluster runs an image that rebuilds bit-for-bit from its commit (two independent from-scratch builds produced the deployed image ID); pinned base and packages, SBOM, Ed25519-signed release manifest.",
   "status": "VERIFIED",
   "verify": "python3 verify_release_manifest.py RELEASE_MANIFEST.json"
  },
  {
   "artifacts": [
    {
     "file": "hosted-consensus-2026-09-27/decision.json",
     "sha256": "f9e53b72eeaedfc256eb5b7b0e426321c6aaeb63c2b5ea1e54da1fba93cdf27e",
     "urls": [
      "https://cainstudio.online/proof/bundle/hosted-consensus-2026-09-27/decision.json",
      "https://mcpgate.online/proof/bundle/hosted-consensus-2026-09-27/decision.json",
      "https://clawx.click/evidence/hosted-consensus-2026-09-27/decision.json"
     ]
    },
    {
     "file": "hosted-consensus-2026-09-27/qc.json",
     "sha256": "4314a03ae57da8075806951a4a999d170c5215c3cd8680a3e5633f1bc22d85ba",
     "urls": [
      "https://cainstudio.online/proof/bundle/hosted-consensus-2026-09-27/qc.json",
      "https://mcpgate.online/proof/bundle/hosted-consensus-2026-09-27/qc.json",
      "https://clawx.click/evidence/hosted-consensus-2026-09-27/qc.json"
     ]
    },
    {
     "file": "hosted-consensus-2026-09-27/verify_hosted_decision.py.txt",
     "sha256": "e3a4ceff12c81987af5672cf047ab9935e0e0d95a1ec7b61bf14e39091b1f3f1",
     "urls": [
      "https://cainstudio.online/proof/bundle/hosted-consensus-2026-09-27/verify_hosted_decision.py.txt",
      "https://mcpgate.online/proof/bundle/hosted-consensus-2026-09-27/verify_hosted_decision.py.txt",
      "https://clawx.click/evidence/hosted-consensus-2026-09-27/verify_hosted_decision.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-HOSTED-CONSENSUS",
   "limits": "enforce mode is the default for every tenant since 2026-09-27 (GET /fabric/status: mode enforce); a tenant may opt down to shadow mode (logged), in which case its verdicts are recorded but not enforced",
   "reproduce": [
    "https://clawx.click/evidence/hosted-consensus-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "The hosted Fabric orders every recorded decision through the live PBFT cluster; since 2026-09-27 the gateway itself verifies the commit quorum certificate (>= 3 pinned Ed25519 signatures over the digest it computes for that decision) and a replica's unproven 'COMMITTED' counts as a denial. Each decision shows the check (certificate hash, signers), and GET /fabric/decisions/{id}/integrity re-checks a STORED decision against the commitment the quorum signed (consensus_anchor); every stored decision record is also Ed25519-signed by a key kept outside the database (GET /fabric/decision-signing-key).",
   "status": "VERIFIED",
   "verify": "python3 verify_hosted_decision.py --live https://cainstudio.online membership.json  (see REPRODUCE.txt)"
  },
  {
   "artifacts": [
    {
     "file": "decision-signing-2026-09-27/record.json",
     "sha256": "36472edfcda70ee1f29276daf3b7f7ed392ddbbce2f9b342b7b57deb4c0f59aa",
     "urls": [
      "https://cainstudio.online/proof/bundle/decision-signing-2026-09-27/record.json",
      "https://mcpgate.online/proof/bundle/decision-signing-2026-09-27/record.json",
      "https://clawx.click/evidence/decision-signing-2026-09-27/record.json"
     ]
    },
    {
     "file": "decision-signing-2026-09-27/signing-key.json",
     "sha256": "e506f192a4f946518b781458d5fa9315451ec10138333fa37a86779d8c0ac016",
     "urls": [
      "https://cainstudio.online/proof/bundle/decision-signing-2026-09-27/signing-key.json",
      "https://mcpgate.online/proof/bundle/decision-signing-2026-09-27/signing-key.json",
      "https://clawx.click/evidence/decision-signing-2026-09-27/signing-key.json"
     ]
    },
    {
     "file": "decision-signing-2026-09-27/verify_decision_record.py.txt",
     "sha256": "78051196a7a7a7e288020d037366fad0a3c4f83c176d8b4469687c50547a64c6",
     "urls": [
      "https://cainstudio.online/proof/bundle/decision-signing-2026-09-27/verify_decision_record.py.txt",
      "https://mcpgate.online/proof/bundle/decision-signing-2026-09-27/verify_decision_record.py.txt",
      "https://clawx.click/evidence/decision-signing-2026-09-27/verify_decision_record.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-DECISION-RECORD-SIGNING",
   "limits": "does not protect against root on the gateway host, which holds both key and database; records before 2026-09-27 are unsigned; the full row of a live decision is not public (the demo shows the gateway's own check)",
   "reproduce": [
    "https://clawx.click/evidence/decision-signing-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "Every hosted Fabric decision record written since 2026-09-27 is signed: the gateway signs the record's SHA-256 digest with an Ed25519 key kept outside its database, so a database writer who alters a record and recomputes its digest is detected. The published record's digest is recomputed from its own fields by a verifier with no CAIN code, the signature verifies against the key served by another site, and two tampered copies (verdict changed; verdict changed with the digest recomputed) both fail.",
   "status": "VERIFIED",
   "verify": "python3 verify_decision_record.py record.json --key https://mcpgate.online/fabric/decision-signing-key --self-test  (see REPRODUCE.txt)"
  },
  {
   "artifacts": [],
   "evidence_level": 0,
   "id": "C42-HARDWARE-ATTESTATION",
   "limits": "none of the 4 servers has a TPM, AMD SEV or Intel TDX (checked 2026-09-27); attestation fields in security contexts are declared hashes, not hardware quotes; needs servers with that hardware",
   "reproduce": [],
   "statement": "Hardware-backed attestation of nodes or agents.",
   "status": "NOT_IMPLEMENTED",
   "verify": "-"
  },
  {
   "artifacts": [
    {
     "file": "formal-2026-09-27/CAINPBFTCommitSafety.tla.txt",
     "sha256": "4b5dbbeda5bd6db9be9707a6e5f9dda1f0ea89656b9040e4ad018e1b134ce238",
     "urls": [
      "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tla.txt",
      "https://mcpgate.online/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tla.txt",
      "https://clawx.click/evidence/formal-2026-09-27/CAINPBFTCommitSafety.tla.txt"
     ]
    },
    {
     "file": "formal-2026-09-27/CAINPBFTCommitSafety.tlc.json",
     "sha256": "078d1bc438d8ac7bcf3113c4e8c2ed95799e8a6dcc6bece9f7a28a34536e7fcb",
     "urls": [
      "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tlc.json",
      "https://mcpgate.online/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tlc.json",
      "https://clawx.click/evidence/formal-2026-09-27/CAINPBFTCommitSafety.tlc.json"
     ]
    },
    {
     "file": "formal-2026-09-27/CAINMCPGateAuthorization.tla.txt",
     "sha256": "6a53f85d2ce4d0ac749d556cf0932dee99dbf429b27797285c0e69feb7415fbb",
     "urls": [
      "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tla.txt",
      "https://mcpgate.online/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tla.txt",
      "https://clawx.click/evidence/formal-2026-09-27/CAINMCPGateAuthorization.tla.txt"
     ]
    },
    {
     "file": "formal-2026-09-27/CAINMCPGateAuthorization.tlc.json",
     "sha256": "611048f422608b0ce3399d78dd437bc45c8638198e06b71eadc64e9901a8d712",
     "urls": [
      "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tlc.json",
      "https://mcpgate.online/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tlc.json",
      "https://clawx.click/evidence/formal-2026-09-27/CAINMCPGateAuthorization.tlc.json"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-FORMAL-VERIFICATION",
   "limits": "bounded models (N=4, f<=1, one sequence, two views; small action/identity/context/time domains), not a proof about the Python code; no machine-checked proof for unbounded parameters",
   "reproduce": [
    "https://clawx.click/evidence/formal-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "TLA+ models of the PBFT commit/view-change rules and of the MCPGate authorization gate, checked exhaustively by TLC within stated bounds: no violation of Agreement, CommitOnlyWhenPrepared, no-execution-without-quorum, action/identity/context binding, expiry or single use; every deliberately broken variant (pre-fix execute rule, NEW_VIEW ignoring reports, weakened quorum, each gate check removed) is caught with a counterexample.",
   "status": "VERIFIED",
   "verify": "java -cp tla2tools.jar tlc2.TLC -deadlock <spec> (see formal-2026-09-27/REPRODUCE.txt)"
  },
  {
   "artifacts": [
    {
     "file": "soak-72h-2026-09-25/verify_soak.py.txt",
     "sha256": "deed0270d115ba2cf509820cc7ec464fa835c76420971921558d4e14ac1e0cb4",
     "urls": [
      "https://cainstudio.online/proof/bundle/soak-72h-2026-09-25/verify_soak.py.txt",
      "https://mcpgate.online/proof/bundle/soak-72h-2026-09-25/verify_soak.py.txt",
      "https://clawx.click/evidence/soak-72h-2026-09-25/verify_soak.py.txt"
     ]
    },
    {
     "file": "soak-72h-2026-09-25/REPRODUCE.txt",
     "sha256": "afacde250be9afcf3112a6050b2eec0f67e0b77224ea985e57e6f844928c6d1d",
     "urls": [
      "https://cainstudio.online/proof/bundle/soak-72h-2026-09-25/REPRODUCE.txt",
      "https://mcpgate.online/proof/bundle/soak-72h-2026-09-25/REPRODUCE.txt",
      "https://clawx.click/evidence/soak-72h-2026-09-25/REPRODUCE.txt"
     ]
    },
    {
     "file": "soak-72h-2026-09-25/checkpoint-0024.json",
     "sha256": "07cec42fd5b8456bf6b5b83560dfd4e8c18e18aa84012e7a37216c57adb1ac63",
     "urls": [
      "https://cainstudio.online/proof/bundle/soak-72h-2026-09-25/checkpoint-0024.json",
      "https://mcpgate.online/proof/bundle/soak-72h-2026-09-25/checkpoint-0024.json",
      "https://clawx.click/evidence/soak-72h-2026-09-25/checkpoint-0024.json"
     ]
    }
   ],
   "evidence_level": 3,
   "id": "C42-SOAK-72H",
   "limits": "liveness failure, not a safety failure; one host; not the production cluster; the soak nodes ran image soak72-1b28cf3, without the fix; a passing 72-hour run on the fixed build is still required",
   "reproduce": [
    "https://clawx.click/evidence/soak-72h-2026-09-25/REPRODUCE.txt"
   ],
   "statement": "72-hour adversarial soak (dedicated 4-node cluster, fast path + DAG, crash/restart every 10 min, started 2026-09-25T00:10Z): FAILED. PBFT stopped committing at sequence 4094 about 11 h in (2 replicas in view 39, 2 in view 40, every node HEALTHY, every later request denied), and the harness itself was killed when the host ran out of memory (last checkpoint 0024 at 24.15 h). Safety held: 0 cross-node divergences in 5,154 checks. Cause: no progress timer (only an unreachable primary triggered a view change) and NEW_VIEW replies were dropped, so a lagging replica never caught up; fixed in the engine with a regression test that reproduces the split. A new soak on the fixed build has not run.",
   "status": "FAILED",
   "verify": "python3 verify_soak.py https://clawx.click/evidence/soak-72h-2026-09-25/  (prints VERDICT: FAIL)"
  },
  {
   "artifacts": [
    {
     "file": "soak-multiregion-2026-09-26/REPRODUCE.txt",
     "sha256": "a981f6a68fd3104bc64f85cdc773f2f77add11d8cae7b0fcfeee35e6bccdbfef",
     "urls": [
      "https://cainstudio.online/proof/bundle/soak-multiregion-2026-09-26/REPRODUCE.txt",
      "https://mcpgate.online/proof/bundle/soak-multiregion-2026-09-26/REPRODUCE.txt",
      "https://clawx.click/evidence/soak-multiregion-2026-09-26/REPRODUCE.txt"
     ]
    },
    {
     "file": "soak-multiregion-2026-09-26/verify_soak.py.txt",
     "sha256": "8d9f0a48faf4fea54c38c3795d8b76103cf3dfb3bc92ffe0709a5c9825c7141d",
     "urls": [
      "https://cainstudio.online/proof/bundle/soak-multiregion-2026-09-26/verify_soak.py.txt",
      "https://mcpgate.online/proof/bundle/soak-multiregion-2026-09-26/verify_soak.py.txt",
      "https://clawx.click/evidence/soak-multiregion-2026-09-26/verify_soak.py.txt"
     ]
    }
   ],
   "evidence_level": 3,
   "id": "C42-SOAK-72H-MULTIREGION",
   "limits": "verdict only after 72 h; checkpoints so far are valid, which is not a pass",
   "reproduce": [
    "https://clawx.click/evidence/soak-multiregion-2026-09-26/REPRODUCE.txt"
   ],
   "statement": "72-hour soak on the live multi-region cluster cain-mr-01 on the fixed build (continuous writes, a random replica killed every 20 minutes, hourly signed hash-chained checkpoints each with an MCPGate-enforced authorization and its refused replay): IN PROGRESS since 2026-09-26.",
   "status": "UNVERIFIED",
   "verify": "python3 verify_soak.py https://clawx.click/evidence/soak-multiregion-2026-09-26/  (RUNNING until ~2026-09-29 21:40Z, then PASS/FAIL)"
  },
  {
   "artifacts": [
    {
     "file": "cain45-zod-live-2026-09-27/ZOD_RUN.json",
     "sha256": "6617e0f77463f836e03689ad44ca4a997e5a2b906484c75c7e387b7b4338ee2a",
     "urls": [
      "https://cainstudio.online/proof/bundle/cain45-zod-live-2026-09-27/ZOD_RUN.json",
      "https://mcpgate.online/proof/bundle/cain45-zod-live-2026-09-27/ZOD_RUN.json",
      "https://clawx.click/evidence/cain45-zod-live-2026-09-27/ZOD_RUN.json"
     ]
    },
    {
     "file": "cain45-zod-live-2026-09-27/EVIDENCE_CHAIN.json",
     "sha256": "9b8f04be9dad7f9519157e7cfff94f424cb1144f41d4d0bcb403b6789670ce2b",
     "urls": [
      "https://cainstudio.online/proof/bundle/cain45-zod-live-2026-09-27/EVIDENCE_CHAIN.json",
      "https://mcpgate.online/proof/bundle/cain45-zod-live-2026-09-27/EVIDENCE_CHAIN.json",
      "https://clawx.click/evidence/cain45-zod-live-2026-09-27/EVIDENCE_CHAIN.json"
     ]
    },
    {
     "file": "cain45-zod-live-2026-09-27/qcs.json",
     "sha256": "bed43b640eee07e3d7713a2955b7271c15b4661709d3592c7ca86376c93ac1fc",
     "urls": [
      "https://cainstudio.online/proof/bundle/cain45-zod-live-2026-09-27/qcs.json",
      "https://mcpgate.online/proof/bundle/cain45-zod-live-2026-09-27/qcs.json",
      "https://clawx.click/evidence/cain45-zod-live-2026-09-27/qcs.json"
     ]
    },
    {
     "file": "cain45-zod-live-2026-09-27/verify_cain45_zod.py.txt",
     "sha256": "2695e2faea451abc5d699e436f449958c93de492146caa7632d156a73f0568a4",
     "urls": [
      "https://cainstudio.online/proof/bundle/cain45-zod-live-2026-09-27/verify_cain45_zod.py.txt",
      "https://mcpgate.online/proof/bundle/cain45-zod-live-2026-09-27/verify_cain45_zod.py.txt",
      "https://clawx.click/evidence/cain45-zod-live-2026-09-27/verify_cain45_zod.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C45-ZOD-LIVE",
   "limits": "the hypervisor ran as a library on the gateway host, operator-run, not as a deployed service in front of customer agents; the approval is the operator's; software measurement only (no TPM/TEE); no seccomp filter; egress is deny-all only (no allowlist)",
   "reproduce": [
    "https://clawx.click/evidence/cain45-zod-live-2026-09-27/REPRODUCE.txt"
   ],
   "statement": "Agent Hypervisor / ZoD runtime: an agent acts only inside a ZoD whose authorization the live cluster cain-mr-01 committed with a quorum certificate the hypervisor checks itself; code ran under real confinement (bubblewrap namespaces + cgroup v2, no network); 10 attacks were refused, each a signed DENIED entry in a hash-chained log.",
   "status": "VERIFIED",
   "verify": "python3 verify_cain45_zod.py .  (see cain45-zod-live-2026-09-27/REPRODUCE.txt; expect 10 PASS and VERIFIED)"
  },
  {
   "artifacts": [
    {
     "file": "e6-live-lease-2026-09-28/LEASE_RUN.json",
     "sha256": "ed1d621e60927d8d8c3507fc35eb90df16467365329f2a6d747cbb9df822b4e2",
     "urls": [
      "https://cainstudio.online/proof/bundle/e6-live-lease-2026-09-28/LEASE_RUN.json",
      "https://mcpgate.online/proof/bundle/e6-live-lease-2026-09-28/LEASE_RUN.json",
      "https://clawx.click/evidence/e6-live-lease-2026-09-28/LEASE_RUN.json"
     ]
    },
    {
     "file": "e6-live-lease-2026-09-28/EVIDENCE_CHAINS.json",
     "sha256": "bc9fc9c697889499d556ebe7287a2de1c54041df3a9ff302963e69f490930786",
     "urls": [
      "https://cainstudio.online/proof/bundle/e6-live-lease-2026-09-28/EVIDENCE_CHAINS.json",
      "https://mcpgate.online/proof/bundle/e6-live-lease-2026-09-28/EVIDENCE_CHAINS.json",
      "https://clawx.click/evidence/e6-live-lease-2026-09-28/EVIDENCE_CHAINS.json"
     ]
    },
    {
     "file": "e6-live-lease-2026-09-28/qcs.json",
     "sha256": "a290fb7d1ef584def0c585c4bf8fd175f342777f285255d695aa4823ccdd77b7",
     "urls": [
      "https://cainstudio.online/proof/bundle/e6-live-lease-2026-09-28/qcs.json",
      "https://mcpgate.online/proof/bundle/e6-live-lease-2026-09-28/qcs.json",
      "https://clawx.click/evidence/e6-live-lease-2026-09-28/qcs.json"
     ]
    },
    {
     "file": "e6-live-lease-2026-09-28/verify_e6_lease.py.txt",
     "sha256": "8ddcee34f1b1bbedd4682229079d3d458cc58006a51ab49ad1b8bc576d4e8b70",
     "urls": [
      "https://cainstudio.online/proof/bundle/e6-live-lease-2026-09-28/verify_e6_lease.py.txt",
      "https://mcpgate.online/proof/bundle/e6-live-lease-2026-09-28/verify_e6_lease.py.txt",
      "https://clawx.click/evidence/e6-live-lease-2026-09-28/verify_e6_lease.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-E6-AUTHORITY-LEASES",
   "limits": "the invalidation logic runs in the hypervisor library on the gateway host, not on the cluster nodes -- the cluster supplies the authority being invalidated; invalidation on policy, epoch or membership change and risk/blast-radius budgets are NOT implemented; the separate 4-node 'authoritative state' layer in cain45/ is SIMULATED and not used here",
   "reproduce": [
    "https://clawx.click/evidence/e6-live-lease-2026-09-28/REPRODUCE.txt"
   ],
   "statement": "Evolution #6 authority leases: for each of 9 conditions a ZoD authorized by the live cluster cain-mr-01 made one successful tool call, the condition was tripped, and the next call was refused without the tool running -- TTL expiry, trust below floor, agent identity swapped, tool schema changed, security context changed, trajectory fork, explicit revocation, parent quarantined (child loses authority), required evidence deleted (that row is SELF-REPORTED: hypervisor-signed, since the log proving it is the one deleted).",
   "status": "VERIFIED",
   "verify": "python3 verify_e6_lease.py .  (see e6-live-lease-2026-09-28/REPRODUCE.txt; expect 48/48 checks, VERIFIED)"
  },
  {
   "artifacts": [
    {
     "file": "e7-lease-2026-09-28/LEASE_RUN.json",
     "sha256": "f556b47e040ce60164e803b1398bc0037ba03118ae925e11bad4deed38bddd96",
     "urls": [
      "https://cainstudio.online/proof/bundle/e7-lease-2026-09-28/LEASE_RUN.json",
      "https://mcpgate.online/proof/bundle/e7-lease-2026-09-28/LEASE_RUN.json",
      "https://clawx.click/evidence/e7-lease-2026-09-28/LEASE_RUN.json"
     ]
    },
    {
     "file": "e7-lease-2026-09-28/EVIDENCE_CHAINS.json",
     "sha256": "cd180b374770996e27db226de6053a49bb0e238a697b784565d730979665cd03",
     "urls": [
      "https://cainstudio.online/proof/bundle/e7-lease-2026-09-28/EVIDENCE_CHAINS.json",
      "https://mcpgate.online/proof/bundle/e7-lease-2026-09-28/EVIDENCE_CHAINS.json",
      "https://clawx.click/evidence/e7-lease-2026-09-28/EVIDENCE_CHAINS.json"
     ]
    },
    {
     "file": "e7-lease-2026-09-28/qcs.json",
     "sha256": "150c876ed848d7ffed71ea5e538a008e0f4529f56e08030e23f8822978dbbd58",
     "urls": [
      "https://cainstudio.online/proof/bundle/e7-lease-2026-09-28/qcs.json",
      "https://mcpgate.online/proof/bundle/e7-lease-2026-09-28/qcs.json",
      "https://clawx.click/evidence/e7-lease-2026-09-28/qcs.json"
     ]
    },
    {
     "file": "e7-lease-2026-09-28/verify_e7_lease.py.txt",
     "sha256": "26bac3bae9673597e41a63fa40f523f2347977c54c00c67d90e400c610168039",
     "urls": [
      "https://cainstudio.online/proof/bundle/e7-lease-2026-09-28/verify_e7_lease.py.txt",
      "https://mcpgate.online/proof/bundle/e7-lease-2026-09-28/verify_e7_lease.py.txt",
      "https://clawx.click/evidence/e7-lease-2026-09-28/verify_e7_lease.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-E7-AUTHORITY-LAPSE",
   "limits": "the 3 membership/epoch trips are INJECTED into the hypervisor's view (the live cluster was not re-keyed); the policy and budget trips are real; enforcement is the hypervisor library on the gateway host, not the cluster nodes; only CALL_MCP_TOOL budgets were exercised live (classes C0-C4 unit-tested)",
   "reproduce": [
    "https://clawx.click/evidence/e7-lease-2026-09-28/REPRODUCE.txt"
   ],
   "statement": "Evolution #7: authority granted by the live cluster cain-mr-01 lapses -- the next tool call is refused and the tool never runs -- when the policy root changes or cannot be read, when the risk or blast-radius budget is spent, and when a delegate has spent its parent's budget (delegates are charged up the whole chain, so splitting work cannot multiply authority). Every ZoD is bound to the cluster's real membership configuration, recomputed and quorum-agreed, re-read before every action; a changed epoch, a changed membership or an unknown membership refuses.",
   "status": "VERIFIED",
   "verify": "python3 verify_e7_lease.py .  (see e7-lease-2026-09-28/REPRODUCE.txt; expect 60/60 checks, VERIFIED)"
  },
  {
   "artifacts": [
    {
     "file": "e8-governance-2026-09-28/GOVERNANCE_RUN.json",
     "sha256": "88aab8c5ecba00a23fb587de273fd883e676f2b18bde610d2288334397c12e94",
     "urls": [
      "https://cainstudio.online/proof/bundle/e8-governance-2026-09-28/GOVERNANCE_RUN.json",
      "https://mcpgate.online/proof/bundle/e8-governance-2026-09-28/GOVERNANCE_RUN.json",
      "https://clawx.click/evidence/e8-governance-2026-09-28/GOVERNANCE_RUN.json"
     ]
    },
    {
     "file": "e8-governance-2026-09-28/EVIDENCE_CHAIN.json",
     "sha256": "fb44b81bddbaa2e42a993333f78f851f20c22d63a4efa52d29bbc7271409cbb9",
     "urls": [
      "https://cainstudio.online/proof/bundle/e8-governance-2026-09-28/EVIDENCE_CHAIN.json",
      "https://mcpgate.online/proof/bundle/e8-governance-2026-09-28/EVIDENCE_CHAIN.json",
      "https://clawx.click/evidence/e8-governance-2026-09-28/EVIDENCE_CHAIN.json"
     ]
    },
    {
     "file": "e8-governance-2026-09-28/qcs.json",
     "sha256": "0e1bea55cebc3f67f40ec5dee89cc5b4b1db2b5785fbb0dad1b53c7ae5f91e3f",
     "urls": [
      "https://cainstudio.online/proof/bundle/e8-governance-2026-09-28/qcs.json",
      "https://mcpgate.online/proof/bundle/e8-governance-2026-09-28/qcs.json",
      "https://clawx.click/evidence/e8-governance-2026-09-28/qcs.json"
     ]
    },
    {
     "file": "e8-governance-2026-09-28/verify_e8_governance.py.txt",
     "sha256": "0fd608899c72c9209b797f23be415ee2076e0301c160ce2e32f52939b1210958",
     "urls": [
      "https://cainstudio.online/proof/bundle/e8-governance-2026-09-28/verify_e8_governance.py.txt",
      "https://mcpgate.online/proof/bundle/e8-governance-2026-09-28/verify_e8_governance.py.txt",
      "https://clawx.click/evidence/e8-governance-2026-09-28/verify_e8_governance.py.txt"
     ]
    }
   ],
   "evidence_level": 5,
   "id": "C42-E8-GOVERNED-EVOLUTION",
   "limits": "scripted identities, not a real LLM agent; CAIN contains no world model, digital twin or learning memory -- the run shows that such OUTPUTS cannot become authority; governor and hypervisor are a library on the gateway host, the cluster orders and certifies",
   "reproduce": [
    "https://clawx.click/evidence/e8-governance-2026-09-28/REPRODUCE.txt"
   ],
   "statement": "Evolutions #8/#9: a policy -- the authority ceiling for a tenant's ZoDs -- becomes active only when the live cluster cain-mr-01 commits its activation; an expansion needs a registered human who is not the proposer (an agent's self-approved expansion was refused and never reached the cluster); a restriction needs no human and revoked a running ZoD's authority; a ZoD above the ceiling was refused. A world-model prediction, a simulated ALLOW citing a real certified sequence, a 10-agent signed vote and a replayed memory were each presented as the basis for authority and each refused because the live cluster had not certified it.",
   "status": "VERIFIED",
   "verify": "python3 verify_e8_governance.py .  (see e8-governance-2026-09-28/REPRODUCE.txt; expect 19/19 checks, VERIFIED)"
  },
  {
   "artifacts": [],
   "evidence_level": 0,
   "id": "C42-LEGACY-SELF-ASSERTED",
   "limits": "self-asserted by earlier releases; no certification body, no reproducible verifier; found by the public evidence inventory (CAIN42_PUBLIC_EVIDENCE_INVENTORY.json)",
   "reproduce": [],
   "statement": "Seven older files still served on the sites assert strong statuses that no evidence in this registry supports: CAIN42_BYZANTINE_CERTIFICATION.json (CERTIFIED), CAIN42_ENTERPRISE_PERMANENT_MEMORY.json (A_PLUS_ENTERPRISE_CERTIFIED), CAIN42_RELEASE_MANIFEST.json (PRODUCTION_HARDENED) on clawx.click/evidence/; CAIN_13_STATUS.json and v13/CAIN_13_STATUS.json (OPERATIONAL_PROVEN), cain_14_agentic_trust_evidence.json and v2/kernel-self-defense-evidence.json (OPERATIONAL_AND_VERIFIED) on /proof/bundle/. They are kept for history; their statuses are SUPERSEDED by this registry and must not be read as current claims.",
   "status": "UNVERIFIED",
   "verify": "-"
  },
  {
   "artifacts": [],
   "evidence_level": 0,
   "id": "C42-THIRD-PARTY-REVIEW",
   "limits": "none exists",
   "reproduce": [],
   "statement": "Independent third-party review or certification (SOC 2, ISO 27001, FedRAMP, ...).",
   "status": "NOT_IMPLEMENTED",
   "verify": "-"
  }
 ],
 "claims_registry": {
  "claims_by_status": {
   "BENCHMARKED": 2,
   "FAILED": 1,
   "NOT_IMPLEMENTED": 3,
   "SIMULATED": 2,
   "TESTED": 2,
   "UNVERIFIED": 3,
   "VERIFIED": 18
  },
  "issued_at": "2026-09-28T04:03:15Z",
  "registry_digest": "ee5834ef8e5f5ff7aeb2a2eb7f429f77c8615f28719db5f1f5838672a0e9cf1e",
  "url": "https://clawx.click/evidence/claims/CAIN42_FINAL_PUBLIC_CLAIMS.json",
  "verify": "python3 verify_claims.py https://clawx.click/evidence/claims/CAIN42_FINAL_PUBLIC_CLAIMS.json (verifier: https://clawx.click/evidence/claims/verify_claims.py.txt)"
 },
 "deployment": {
  "deployment": {
   "commit_at_gateway_start": "ac27feff434434627a14f9ba2476f43a6f7c8b9c",
   "gateway_started_at": "Mon 2026-09-28 05:42:54 UTC",
   "hosts": "cainstudio.online, mcpgate.online and clawx.click resolve to one host; one gateway process serves the first two and the API paths of the third",
   "mode_flags": {
    "CAIN_FRONTIER_MODE": {
     "default_defined_in": "cain/frontier/gate.py",
     "gates": "frontier gate",
     "set": false,
     "value": "shadow"
    },
    "CAIN_MCP_ENFORCE": {
     "default_defined_in": "mcp_runtime.py",
     "gates": "MCP runtime checks",
     "set": false,
     "value": "true"
    },
    "CAIN_SECURITY_ENFORCE": {
     "default_defined_in": "security_engine.py",
     "gates": "security engine",
     "set": false,
     "value": "true"
    },
    "FABRIC_APPROVAL_ENFORCE": {
     "default_defined_in": "fabric_control_plane.py",
     "gates": "human-approval holds",
     "set": false,
     "value": "false"
    },
    "FABRIC_ENFORCE": {
     "default_defined_in": "fabric_control_plane.py",
     "gates": "master switch for the hosted decision pipeline",
     "set": false,
     "value": "false"
    },
    "FABRIC_VERIFY_ENFORCE": {
     "default_defined_in": "fabric_control_plane.py",
     "gates": "plan verification stage",
     "set": false,
     "value": "false"
    },
    "FUZZER_BLOCKLIST_ENFORCE": {
     "default_defined_in": "main.py",
     "gates": "adversarial-fuzzer blocklist on MCP tool calls",
     "set": false,
     "value": "false"
    },
    "OPA_ENFORCE": {
     "default_defined_in": "main.py",
     "gates": "OPA policy on the proxied request path",
     "set": false,
     "value": "false"
    }
   },
   "service": "cain-platform-gateway",
   "working_tree_note": "19 Python file(s) under platform-gateway differ from git at build time (uncommitted or untracked); the running process may include uncommitted code"
  },
  "overall_status": "LIVE_SELF_ATTESTED",
  "repository": {
   "head_commit": "d2ac7e6c7522df9e80f8a58842353a6649944e08",
   "head_committed_at": "2026-09-28T07:14:15Z",
   "head_subject": "verify(l5): multi-source independent verification + evidence on all three changelogs",
   "latest_tag": "cain-34.0-production",
   "tag_note": "tagged 2026-09-17; not a CAIN-42 release. There is no CAIN-42 release tag; the deployed code is identified by commit."
  }
 },
 "digest": "847ef9aa725ac369d700244bc9081f5331b8522a6bf75cbd4c4ccf37f0f576dd",
 "evidence_root_public_key_b64": "t1I4vBpOasgbBSWYTN2g7xL1En7qZ6lhgbt6n2OpeG8=",
 "gates": [
  {
   "evidence_and_limits": "cain-mr-02: 4 replicas on 4 servers in 4 regions (Atlanta, Los Angeles, Miami, Silicon Valley), one each. Every server was taken offline in turn and the cluster kept committing (6/6 each time, including a leader change each time); with two servers down it refused verify 264 certificates \u00b7 computed resilience; one provider (Vultr): a provider-wide outage is not covered",
   "gate": "A",
   "links": [
    "https://clawx.click/evidence/four-server-cluster-2026-09-27/index.html",
    "https://clawx.click/api/v1/live-cluster/resilience?cluster=cain-mr-02"
   ],
   "requirement": "Independent geographic failure domains",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "cain-mr-01 orders decisions across all three regions over WireGuard; every decision carries signatures from at least 2 regions live \u00b7 certificates",
   "gate": "B",
   "links": [
    "https://clawx.click/live-cluster.html",
    "https://clawx.click/evidence/multi-region-cluster-2026-09-26/index.html"
   ],
   "requirement": "Real cross-region consensus",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "Miami down: 6/6 committed. Atlanta and the primary down: view change, 6/6 committed with no Atlanta signature fault schedule and results",
   "gate": "C",
   "links": [
    "https://clawx.click/evidence/multi-region-cluster-2026-09-26/REPRODUCE.txt"
   ],
   "requirement": "Regional failure test",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "live: a host cut off while running (the other three committed 6/6, the isolated replica refused writes and committed nothing), and a 2|2 split (neither side committed: no split brain); all four agreed within about 3 s of each heal verify 2,960 certificates ; one-way (asymmetric) partitions on the 4-server cluster: a deaf replica, a one-way link and a mute replica, the cluster kept committing and converged after each heal, no fork verify 968 certificates (complete one-way loss only; not flapping links, partial loss or delay); and under 10% loss, 120\u00b140 ms jitter, 5% duplication and reordering on all four replicas: no fork, but throughput fell from 1.76 to 0.16 commits/s and 22 of 61 writes timed out (recovered fully afterwards) verify 2,728 certificates",
   "gate": "D",
   "links": [
    "https://clawx.click/evidence/partition-test-2026-09-26/index.html",
    "https://clawx.click/evidence/asymmetric-partition-2026-09-27/index.html",
    "https://clawx.click/evidence/degraded-network-2026-09-27/index.html"
   ],
   "requirement": "Network partition test",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "across the three regions on the production image: a replica forging votes was rejected by every honest replica (6/6 committed); an equivocating primary was proven from its own two signatures, quarantined by all 3 honest replicas, and replaced by a view change (6/6 committed) verify certificates and the proof; run on a disposable cluster with the same placement, since production refuses fault injection by design; f=1, two behaviours",
   "gate": "E",
   "links": [
    "https://clawx.click/evidence/byzantine-test-2026-09-26/index.html"
   ],
   "requirement": "Byzantine-node test",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "all four replicas hold an identical decision chain and state after the fault run (336 certificates) verify in your browser",
   "gate": "F",
   "links": [
    "https://clawx.click/evidence/multi-region-cluster-2026-09-26/index.html"
   ],
   "requirement": "State convergence",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "decision chain folded from genesis on every replica; standalone verifier 49/49 verifier output",
   "gate": "G",
   "links": [
    "https://clawx.click/evidence/multi-region-cluster-2026-09-26/VERIFIER_OUTPUT.txt"
   ],
   "requirement": "Evidence continuity",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "live: every replica restarted under continuous writes (83/83 committed, 0 client failures, catch-up 9-12 s); one replica lost its whole disk and rebuilt from peers in 13.6 s with an identical quorum-signed history verify all 2,832 certificates",
   "gate": "H",
   "links": [
    "https://clawx.click/evidence/ops-drill-2026-09-26/index.html"
   ],
   "requirement": "Recovery verification",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "verifiers import no CAIN code; your browser re-checks every signature the verifier",
   "gate": "I",
   "links": [
    "https://clawx.click/evidence/multi-region-cluster-2026-09-26/verify_multi_region_bundle.py.txt"
   ],
   "requirement": "Clean-room verification",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "3 independent runs per level on the live cluster, every write committed: 1 client 2.0-2.4 commits/s (p50 409-438 ms), 4 clients 4.1-4.8/s (p95 1.07-1.26 s), 8 clients 4.1-4.5/s (p95 3.0-3.4 s) all runs and method",
   "gate": "J",
   "links": [
    "https://clawx.click/evidence/bench-2026-09-26/BENCH.json"
   ],
   "requirement": "Repeatable benchmark",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "870 passed, 0 failed in the published run (consensus engine, Byzantine, evidence, multi-region, hosted pipeline, site truth, secrecy, package mirror); the earlier 4 failures were fixed, including a real approval-workflow bug test report; operator-run, not independent CI",
   "gate": "K",
   "links": [
    "https://clawx.click/evidence/test-report-2026-09-26/TEST_REPORT.json"
   ],
   "requirement": "Security invariant suite",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "the 4-server cluster runs an image (commit 948b189 since 2026-09-27, upgraded replica by replica under live traffic) that rebuilds bit-for-bit: two independent from-scratch builds of its commit produced exactly the deployed image ID; the base image is pinned by digest, every package is pinned, the files are byte-identical to the commit, and it has an SBOM and an Ed25519-signed release manifest (verifier 17/17) release manifest; the 3-server soak cluster moves to it after the soak",
   "gate": "L",
   "links": [
    "https://clawx.click/evidence/release-cain-mr-02-948b189/RELEASE_MANIFEST.json"
   ],
   "requirement": "Supply-chain verification",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "live: rolled back to the previous engine (9fedb49) and forward again (81bdf84), one replica at a time with the primary last; every replica caught up in 10-14 s, cluster HEALTHY 4/4 after each direction, no quarantines rollback record (both engines share one storage format)",
   "gate": "M",
   "links": [
    "https://clawx.click/evidence/rollback-drill-2026-09-26/ROLLBACK.json"
   ],
   "requirement": "Rollback verification",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "cain-mr-02: two replicas on two servers (Miami, Silicon Valley) lost their storage at once and were rebuilt only from off-host backups held in other regions; with both down the cluster committed 0 of 4 writes; afterwards 0 decisions lost, identical height and state on all four 10.3 s after restart verify 416 certificates. Earlier: one replica restored from a snapshot 12 decisions old in 8.3 s under writes verify 3,096 certificates. Hourly backups of both clusters go to another region, and every day each backup is proven to be a quorum-signed prefix of the live history daily restore validation; not covered: backups on another provider, encryption at rest, losing 3 of 4 replicas",
   "gate": "N",
   "links": [
    "https://clawx.click/evidence/storage-loss-drill-2026-09-27/index.html",
    "https://clawx.click/evidence/restore-drill-2026-09-26/index.html",
    "https://clawx.click/evidence/restore-validation/REPRODUCE.txt"
   ],
   "requirement": "Disaster-recovery verification",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "no third party has reproduced the results yet",
   "gate": "O",
   "links": [],
   "requirement": "Independent reproduction",
   "status": "NOT YET"
  },
  {
   "evidence_and_limits": "every recorded hosted decision is ordered through the live cluster, and since 2026-09-27 the gateway verifies the quorum certificate itself (3 pinned signatures over this decision's digest; a replica's unproven \"COMMITTED\" is a denial). Try it: POST /fabric/try?scenario=safe-read, read consensus.certificate_verified_by_gateway, or verify a decision yourself. Since 2026-09-27 every tenant, free included, is in enforce mode by default (GET /fabric/status shows mode: enforce); a tenant can opt down to shadow mode, and that choice is logged",
   "gate": "P",
   "links": [
    "https://clawx.click/evidence/hosted-consensus-2026-09-27/REPRODUCE.txt"
   ],
   "requirement": "Hosted PBFT in the live authorization path",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "authorizations committed by the live 4-server cluster; every call through the MCPGate proxy to a separate MCP server process: 5 authorized calls ran, 12 attacks blocked with signed denials returned to the caller verify (one command); the downstream is a sandbox server, and cainstudio.online does not route customer tool calls through this gate",
   "gate": "Q",
   "links": [
    "https://clawx.click/evidence/mcpgate-live-2026-09-27/REPRODUCE.txt"
   ],
   "requirement": "MCPGate production enforcement",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "none of the 4 servers has a TPM, AMD SEV or Intel TDX (checked 2026-09-27); nothing is labelled hardware-attested. Needs servers with that hardware",
   "gate": "R",
   "links": [],
   "requirement": "Hardware attestation",
   "status": "BLOCKED"
  },
  {
   "evidence_and_limits": "TLA+ models of the PBFT commit/view-change rules and of the MCPGate gate, checked exhaustively by TLC: 0 violations in 7.3 million distinct states; all 8 deliberately broken variants caught models, results, how to re-run; bounded models, not a proof about the code",
   "gate": "S",
   "links": [
    "https://clawx.click/evidence/formal-2026-09-27/REPRODUCE.txt"
   ],
   "requirement": "Formal protocol verification",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "no third party has reviewed CAIN-42",
   "gate": "T",
   "links": [],
   "requirement": "Independent security review",
   "status": "NOT YET"
  },
  {
   "evidence_and_limits": "both live clusters publish a signed, hash-chained proof of their live state every 30 minutes, checkable from the public URL cain-mr-01 \u00b7 cain-mr-02; a health watcher alerts on failure; operator-run",
   "gate": "U",
   "links": [
    "https://clawx.click/evidence/hourly-proof/index.json",
    "https://clawx.click/evidence/hourly-proof-mr02/index.json"
   ],
   "requirement": "Continuous production verification",
   "status": "PASS"
  },
  {
   "evidence_and_limits": "every server is on one provider (Vultr); needs a second provider account",
   "gate": "V",
   "links": [],
   "requirement": "Multi-provider failure domains",
   "status": "NOT YET"
  },
  {
   "evidence_and_limits": "on the live multi-region cluster since 2026-09-26, verdict after 72 h (about 2026-09-29 21:40 UTC); every checkpoint so far is valid verify. The earlier single-host soak FAILED (liveness stall, fixed)",
   "gate": "W",
   "links": [
    "https://clawx.click/evidence/soak-multiregion-2026-09-26/REPRODUCE.txt"
   ],
   "requirement": "72-hour production soak",
   "status": "RUNNING"
  },
  {
   "evidence_and_limits": "cluster decision chains, MCPGate proof chains, drills, daily backup validation and the signed claims registry all verify with standalone verifiers; every hosted decision record is Ed25519-signed by a key kept outside the database (public key) and its pre-consensus content is checked against the commitment the PBFT quorum signed (consensus_anchor); both are reported by GET /fabric/decisions/{id}/integrity and in every /fabric/try answer verify a hosted decision \u00b7 daily backup validation; one operator: root on the gateway host holds both the signing key and the database",
   "gate": "X",
   "links": [
    "https://cainstudio.online/fabric/decision-signing-key",
    "https://clawx.click/evidence/hosted-consensus-2026-09-27/REPRODUCE.txt",
    "https://clawx.click/evidence/restore-validation/REPRODUCE.txt"
   ],
   "requirement": "Full evidence-chain verification",
   "status": "PASS"
  }
 ],
 "gates_summary": {
  "A-O": "14 of 15 PASS",
  "P-X": "5 of 9 PASS"
 },
 "generated_at": "2026-09-28T09:50:05Z",
 "generator": "scripts/cain42_site/build_machine_index.py (from the signed claims registry, now.json and the gate tables)",
 "how_to_read": "Every claim has a status (VERIFIED, TESTED, SIMULATED, UNVERIFIED, FAILED, NOT_IMPLEMENTED, ...), its limits, the SHA-256 of each artifact, and a verification command whose checker imports no CAIN code. Self-attested: one operator runs the clusters, the tests and the signing key; no third party has reviewed or reproduced the results. Check, do not trust.",
 "known_limitations": [
  "OPA_ENFORCE is off: OPA policy on the proxied request path is recorded, not enforced.",
  "FUZZER_BLOCKLIST_ENFORCE is off: adversarial-fuzzer blocklist on MCP tool calls is recorded, not enforced.",
  "The frontier gate runs in SHADOW mode.",
  "/frontier/status reports decision_log_intact=false (the frontier gate's decision log does not verify).",
  "The gateway's embedded PBFT node reports committed sequence 0; hosted decisions are ordered by the external multi-region cluster cain-mr-01 instead (claim C42-HOSTED-CONSENSUS), and block only for tenants in enforce mode.",
  "C42-PBFT-QC is VERIFIED only within: disposable cluster on one host.",
  "C42-FAST-PATH is VERIFIED only within: bounded model (single slot, 3 views); not deployed live.",
  "C42-FAST-PATH-LATENCY is BENCHMARKED: negative result; host CPU-bound.",
  "C42-DAG-ORDER is VERIFIED only within: disposable cluster; ordering bias removed in Evolution 5 (measured), fairness beyond position bias not measured.",
  "C42-MCPGATE-ENFORCES is VERIFIED only within: self-attested run by the operator; the downstream is a sandbox key-value MCP server; cainstudio.online does not route customer tool calls through this gate.",
  "C42-AGENTS-CANNOT-SELF-AUTHORIZE is SIMULATED: scripted agents, not LLMs; attestation SIMULATED; in-process.",
  "C42-INVARIANTS is TESTED: executable tests, not formal verification; see each invariant's coverage/gap.",
  "C42-1000-TRAJECTORIES is SIMULATED: in-process; scripted agents.",
  "C42-ORDERING-FAIRNESS is BENCHMARKED: position bias only; censorship and economic bias not measured.",
  "C42-LIVE-CLUSTER-EVO2 is UNVERIFIED: live cluster API is private; its first two decisions predate certificates.",
  "C42-PRIVACY-FIREWALL is TESTED: pattern-based; not a guarantee against every leak class.",
  "C42-INDEPENDENT-FAILURE-DOMAINS is VERIFIED only within: one provider (Vultr) and one operator: a provider-wide outage or operator compromise is not covered.",
  "C42-MULTI-PROVIDER is NOT_IMPLEMENTED: every server is on Vultr; needs a second provider account.",
  "C42-LIVE-MULTI-REGION is VERIFIED only within: region placement is stated by the operator.",
  "C42-PARTITION-BYZANTINE is VERIFIED only within: partitions: whole-host link loss and complete one-way loss (deaf replica, one-way link, mute replica) for 60 s; not flapping links, partial loss, delay or duplication; Byzantine tests on a disposable cluster with the same placement; f=1, two behaviours.",
  "C42-DEGRADED-NETWORK is VERIFIED only within: VERIFIED is for safety only; throughput under loss is a measured weakness, not a pass; one impairment profile, one client host.",
  "C42-DISASTER-RECOVERY is VERIFIED only within: same provider; backups not encrypted at rest (they hold consensus data that is public by design; identity keys are never backed up); loss of 3 of 4 not drilled; the daily validation checks restorability of every off-host backup, it does not restore into a running replica.",
  "C42-ROLLBACK is VERIFIED only within: both engines share one storage format.",
  "C42-REPRODUCIBLE-RELEASE is VERIFIED only within: source not published: the rebuild is reproducible by the operator; outsiders can check the manifest signature and digests.",
  "C42-HOSTED-CONSENSUS is VERIFIED only within: enforce mode is the default for every tenant since 2026-09-27 (GET /fabric/status: mode enforce); a tenant may opt down to shadow mode (logged), in which case its verdicts are recorded but not enforced.",
  "C42-DECISION-RECORD-SIGNING is VERIFIED only within: does not protect against root on the gateway host, which holds both key and database; records before 2026-09-27 are unsigned; the full row of a live decision is not public (the demo shows the gateway's own check).",
  "C42-HARDWARE-ATTESTATION is NOT_IMPLEMENTED: none of the 4 servers has a TPM, AMD SEV or Intel TDX (checked 2026-09-27); attestation fields in security contexts are declared hashes, not hardware quotes; needs servers with that hardware.",
  "C42-FORMAL-VERIFICATION is VERIFIED only within: bounded models (N=4, f<=1, one sequence, two views; small action/identity/context/time domains), not a proof about the Python code; no machine-checked proof for unbounded parameters.",
  "C42-SOAK-72H is FAILED: liveness failure, not a safety failure; one host; not the production cluster; the soak nodes ran image soak72-1b28cf3, without the fix; a passing 72-hour run on the fixed build is still required.",
  "C42-SOAK-72H-MULTIREGION is UNVERIFIED: verdict only after 72 h; checkpoints so far are valid, which is not a pass.",
  "C45-ZOD-LIVE is VERIFIED only within: the hypervisor ran as a library on the gateway host, operator-run, not as a deployed service in front of customer agents; the approval is the operator's; software measurement only (no TPM/TEE); no seccomp filter; egress is deny-all only (no allowlist).",
  "C42-E6-AUTHORITY-LEASES is VERIFIED only within: the invalidation logic runs in the hypervisor library on the gateway host, not on the cluster nodes -- the cluster supplies the authority being invalidated; invalidation on policy, epoch or membership change and risk/blast-radius budgets are NOT implemented; the separate 4-node 'authoritative state' layer in cain45/ is SIMULATED and not used here.",
  "C42-E7-AUTHORITY-LAPSE is VERIFIED only within: the 3 membership/epoch trips are INJECTED into the hypervisor's view (the live cluster was not re-keyed); the policy and budget trips are real; enforcement is the hypervisor library on the gateway host, not the cluster nodes; only CALL_MCP_TOOL budgets were exercised live (classes C0-C4 unit-tested).",
  "C42-E8-GOVERNED-EVOLUTION is VERIFIED only within: scripted identities, not a real LLM agent; CAIN contains no world model, digital twin or learning memory -- the run shows that such OUTPUTS cannot become authority; governor and hypervisor are a library on the gateway host, the cluster orders and certifies.",
  "C42-LEGACY-SELF-ASSERTED is UNVERIFIED: self-asserted by earlier releases; no certification body, no reproducible verifier; found by the public evidence inventory (CAIN42_PUBLIC_EVIDENCE_INVENTORY.json).",
  "C42-THIRD-PARTY-REVIEW is NOT_IMPLEMENTED: none exists."
 ],
 "live_endpoints": {
  "cluster_health_mr02": "https://cainstudio.online/api/v1/live-cluster/health?cluster=cain-mr-02",
  "cluster_status": "https://cainstudio.online/api/v1/live-cluster/status",
  "daily_restore_validation": "https://clawx.click/evidence/restore-validation/latest.json",
  "hosted_decision_demo": "POST https://cainstudio.online/fabric/try?scenario=safe-read  (no account)",
  "hosted_pipeline_status": "https://cainstudio.online/fabric/status",
  "proof_every_30_min_mr01": "https://clawx.click/evidence/hourly-proof/index.json",
  "proof_every_30_min_mr02": "https://clawx.click/evidence/hourly-proof-mr02/index.json",
  "quorum_certificate": "https://cainstudio.online/api/v1/live-cluster/qc/{sequence}",
  "soak_72h_latest": "https://clawx.click/evidence/soak-multiregion-2026-09-26/latest.json",
  "system_state": "https://cainstudio.online/now.json"
 },
 "public_evidence_inventory": {
  "urls": [
   "https://cainstudio.online/proof/bundle/CAIN42_PUBLIC_EVIDENCE_INVENTORY.json",
   "https://mcpgate.online/proof/bundle/CAIN42_PUBLIC_EVIDENCE_INVENTORY.json",
   "https://clawx.click/evidence/CAIN42_PUBLIC_EVIDENCE_INVENTORY.json"
  ],
  "what": "every served evidence file and bundle on the 3 sites, crawled, with the registry status it maps to; files no signed claim covers are listed as unregistered/self-asserted, not as evidence"
 },
 "schema": "CAIN42/EVIDENCE-INDEX/v1",
 "signature_b64": "DxMaZNC4hf9G48RCiqCnYLAnHUCqOXzg66EEvuJ0LcuEj6F6zphgEdMxpNnlP0XOFzl1QsJopHdEdWbUSFgmAw==",
 "signature_covers": "sha256 of the canonical JSON (sort_keys, separators , :) of every field except digest, evidence_root_public_key_b64, signature_b64, signature_covers; compare the key with https://mcpgate.online/proof/bundle/claims/evidence-root.pub.json",
 "soak_72h": {
  "at": "2026-09-28T09:42:19Z",
  "checkpoint": 36,
  "checkpoint_age_hours": 0.13,
  "commit_heights": {
   "cain-mr-node-1": 18936,
   "cain-mr-node-2": 18936,
   "cain-mr-node-3": 18936,
   "cain-mr-node-4": 18936
  },
  "counters": {
   "allow": 17830,
   "anomalies": 0,
   "checkpoints": 36,
   "checks": 17538,
   "dag_submits": 0,
   "deny": 116,
   "divergences": 0,
   "errors": 105,
   "faults": 102,
   "requests": 17946,
   "restarts": 102,
   "view_changes_seen": 205
  },
  "elapsed_hours": 36.047,
  "enforcement_probe_error": null,
  "harness": "RUNNING",
  "name": "soak-multiregion-2026-09-26",
  "verdict": "SEE claim C42-SOAK-72H-MULTIREGION and verify_soak.py"
 },
 "system": "CAIN-42",
 "verify_everything": {
  "checks": "evidence-root key identical on 3 sites; this index and the claims registry re-hash and verify; index and registry agree; every claim's evidence file on every site has the signed SHA-256; live endpoints answer",
  "command": "curl -so verify_all.py https://clawx.click/verify_all.py.txt && python3 verify_all.py [--json]",
  "not_checked": "each claim's own deep verifier (its `verify` command); no third-party review"
 }
}