{
 "claims": [
  {
   "cannot_establish": "Who controls the key; whether anything the signed files say is true.",
   "evidence_ids": [
    "EV-BUILD"
   ],
   "id": "CLM-KIT-01",
   "procedure": "Run VERIFIER/cain42_verify.py with --trust-anchor obtained out of band and --expect-sha256 from the release page; verdict must be PASS_INTEGRITY.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "These kit bytes are the release signed by the holder of cain42-auditor-kit-release-2026-10.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "Any verdict other than PASS_INTEGRITY / PASS_INTEGRITY_WITH_WARNINGS on the published ZIP with the published anchor."
  },
  {
   "assertion": {
    "kind": "kit_version",
    "value": "8.0.0"
   },
   "cannot_establish": "Nothing beyond internal consistency.",
   "evidence_ids": [
    "EV-BUILD"
   ],
   "id": "CLM-KIT-02",
   "procedure": "Checked automatically: manifest kit_version, archive root, build record and entry docs must agree.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "The kit version is 8.0.0.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "assertion": {
    "kind": "platform_production_ready",
    "value": false
   },
   "cannot_establish": "That the gates that read PASSED_TESTED_SCOPE are correct; the engine and its inputs are the developer's.",
   "evidence_ids": [
    "EV-GATES"
   ],
   "id": "CLM-PLAT-01",
   "procedure": "Read EVIDENCE/platform_release_gates.json; the verifier checks production_ready against the gate statuses using the engine's own rule.",
   "provenance": "DEVELOPER_MEASURED",
   "public_claim_locations": [
    "https://cainstudio.online/.well-known/cain-verification.json"
   ],
   "statement": "The CAIN-42 platform is NOT production ready.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "A gate snapshot with production_ready=true that the engine rule supports."
  },
  {
   "assertion": {
    "gate": "GATE-2",
    "kind": "gate_status",
    "value": "BLOCKED"
   },
   "cannot_establish": "Physical, network or administrative independence of any host; the kit contains no infrastructure evidence.",
   "evidence_ids": [
    "EV-GATES"
   ],
   "id": "CLM-PLAT-02",
   "procedure": "Read the GATE-2 entry; DISTRIBUTED_SYSTEMS/FAULT_MODEL.md.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "GATE-2 (independent failure domains / multi-provider) is BLOCKED: every validator runs on one provider (Vultr).",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "assertion": {
    "gate": "GATE-6",
    "kind": "gate_status",
    "value": "BLOCKED"
   },
   "cannot_establish": "Nothing about the quality of the platform.",
   "evidence_ids": [
    "EV-GATES"
   ],
   "id": "CLM-PLAT-03",
   "procedure": "Read the GATE-6 entry. There is no independent_review_record in this kit.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "GATE-6 (independent third-party audit) is BLOCKED: no external auditor has reviewed CAIN-42.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "cannot_establish": "Safety under real Byzantine behaviour, current liveness, or correctness of the protocol. The engine's GATE-1 summary text ('live cluster ... height 10689+') is static text read from a Prompt-3 evidence file, not a live observation.",
   "evidence_ids": [
    "EV-GATES",
    "EV-QC"
   ],
   "id": "CLM-PLAT-04",
   "procedure": "The kit shows only the engine verdict and one sample 3-of-4 quorum certificate. Reproducing the fault campaign needs repository access (see FULL_AUDIT_RUNBOOK.md section C).",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "GATE-1: PBFT consensus safety and liveness hold in tested scope (25 fault scenarios, 2,500 trials, 0 safety violations).",
   "status": "PARTIALLY_SUPPORTED",
   "would_falsify": "A reproduced fault scenario with conflicting commits, or two valid certificates for different decisions at the same (epoch, view, sequence)."
  },
  {
   "cannot_establish": "Everything: the kit carries no enforcement evidence beyond the engine's PASSED_TESTED_SCOPE label.",
   "evidence_ids": [],
   "id": "CLM-PLAT-05",
   "procedure": "Not checkable from this kit. Requires repository access and the live probes in PLATFORM_AUDIT/ (section B of FULL_AUDIT_RUNBOOK.md).",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "GATE-3: execution cannot bypass enforcement (no valid capability token -> no execution).",
   "status": "NOT_VERIFIED",
   "would_falsify": ""
  },
  {
   "cannot_establish": "Whether tokens are single-use or unforgeable.",
   "evidence_ids": [],
   "id": "CLM-PLAT-06",
   "procedure": "Developer source inspection (not possible for outside auditors): the default is capability_ttl_seconds = 30.0 in platform-gateway/cain_trust_kernel.py. Single-use nonces are a separate property not evaluated here.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "GATE-4 evidence text: capability tokens have 'microsecond TTLs'.",
   "status": "CONTRADICTED",
   "would_falsify": "n/a: recorded as contradicted wording in the engine's evidence summary."
  },
  {
   "cannot_establish": "That production evidence logs use these proofs, or that the fixtures cover the edge cases that matter (they are developer-chosen vectors).",
   "evidence_ids": [
    "EV-MERKLE"
   ],
   "id": "CLM-PLAT-07",
   "procedure": "The verifier recomputes every case in EVIDENCE/merkle_fixtures.json with its own implementation.",
   "provenance": "TEST_VECTOR",
   "statement": "GATE-5: RFC 6962 Merkle inclusion/consistency proofs are verified correctly.",
   "status": "PARTIALLY_SUPPORTED",
   "would_falsify": ""
  },
  {
   "cannot_establish": "That the 4 keys belong to 4 independent operators or machines (they are self-published by one operator), that the decision was correct, or that the cluster is live today. The certificate dates from 2026-09-27.",
   "evidence_ids": [
    "EV-QC"
   ],
   "id": "CLM-PLAT-08",
   "procedure": "Checked automatically: signatures recomputed over the documented signing payload.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "A sample commit certificate from cluster cain-mr-02 carries 3 valid Ed25519 signatures out of 4 replica keys.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "assertion": {
    "kind": "independent_review_completed",
    "value": false
   },
   "cannot_establish": "n/a",
   "evidence_ids": [],
   "id": "CLM-REVIEW-01",
   "procedure": "There is no independent_review_record in the manifest. HUMAN_REVIEW/ and AI_REVIEW/ describe how one would be produced.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "No independent human or AI review of CAIN-42 or of this kit has been completed.",
   "status": "PENDING_EXTERNAL_REVIEW",
   "would_falsify": ""
  },
  {
   "cannot_establish": "Performance on your hardware; anything about the platform.",
   "evidence_ids": [],
   "id": "CLM-KIT-03",
   "procedure": "Measured results are published next to the ZIP (benchmark JSON bound to the ZIP hash), not inside it, because a kit cannot contain a measurement of itself. Re-run BENCHMARKS/run_benchmark.py.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "The 42-Second Initial Evidence Verdict completes in under 42 seconds under the documented conditions.",
   "status": "NOT_VERIFIED",
   "would_falsify": ""
  },
  {
   "cannot_establish": "n/a",
   "evidence_ids": [],
   "id": "CLM-PRIOR-01",
   "procedure": "The archive served as that kit (cain42-verify.zip, sha256 521509b2...) declares kit_version 5.0.0 and source commit 6085b69b, and it trusts a root key shipped inside itself, so an attacker who re-signs with their own key gets exit 0. See KNOWN_LIMITATIONS.md.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "Prior public claim: verification kit 7.0.0 is KIT_RELEASE_READY.",
   "status": "CONTRADICTED",
   "would_falsify": "n/a"
  }
 ],
 "kit_version": "8.0.0",
 "schema": "cain42.claim_evidence_matrix.v1",
 "status_vocabulary": {
  "BLOCKED": "cannot be evaluated until a blocker is cleared",
  "CONTRADICTED": "available evidence contradicts it",
  "NOT_VERIFIED": "this kit carries no evidence for it",
  "PARTIALLY_SUPPORTED": "some evidence; material parts unverifiable from this kit",
  "PENDING_EXTERNAL_REVIEW": "requires an independent party who has not yet acted",
  "SUPPORTED_WITHIN_TESTED_SCOPE": "evidence in this kit supports the statement within the stated scope",
  "UNSUPPORTED": "no evidence exists"
 }
}