{
 "claims": [
  {
   "cannot_establish": "Who controls the key; whether anything the signed files say is true.",
   "evidence_ids": [
    "EV-BUILD"
   ],
   "id": "CLM-KIT-01",
   "procedure": "Run VERIFIER/cain42_verify.py with --trust-anchor obtained out of band and --expect-sha256 from the release page; verdict must be PASS_INTEGRITY.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "These kit bytes are the release signed by the holder of cain42-auditor-kit-release-2026-10.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "Any verdict other than PASS_INTEGRITY / PASS_INTEGRITY_WITH_WARNINGS on the published ZIP with the published anchor."
  },
  {
   "assertion": {
    "kind": "kit_version",
    "value": "8.3.2"
   },
   "cannot_establish": "Nothing beyond internal consistency.",
   "evidence_ids": [
    "EV-BUILD"
   ],
   "id": "CLM-KIT-02",
   "procedure": "Checked automatically: manifest kit_version, archive root, build record and entry docs must agree.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "The kit version is 8.3.2.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "assertion": {
    "kind": "platform_production_ready",
    "value": false
   },
   "cannot_establish": "That the gates that read PASSED_TESTED_SCOPE are correct; the engine and its inputs are the developer's.",
   "evidence_ids": [
    "EV-GATES"
   ],
   "id": "CLM-PLAT-01",
   "procedure": "Read EVIDENCE/platform_release_gates.json; the verifier checks production_ready against the gate statuses using the engine's own rule.",
   "provenance": "DEVELOPER_MEASURED",
   "public_claim_locations": [
    "https://cainstudio.online/.well-known/cain-verification.json"
   ],
   "statement": "The CAIN-42 platform is NOT production ready.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "A gate snapshot with production_ready=true that the engine rule supports."
  },
  {
   "assertion": {
    "gate": "GATE-2",
    "kind": "gate_status",
    "value": "BLOCKED"
   },
   "cannot_establish": "Physical, network or administrative independence of any host; the kit contains no infrastructure evidence.",
   "evidence_ids": [
    "EV-GATES"
   ],
   "id": "CLM-PLAT-02",
   "procedure": "Read the GATE-2 entry; DISTRIBUTED_SYSTEMS/FAULT_MODEL.md.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "GATE-2 (independent failure domains / multi-provider) is BLOCKED: every validator runs on one provider (Vultr).",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "assertion": {
    "gate": "GATE-6",
    "kind": "gate_status",
    "value": "BLOCKED"
   },
   "cannot_establish": "Nothing about the quality of the platform.",
   "evidence_ids": [
    "EV-GATES"
   ],
   "id": "CLM-PLAT-03",
   "procedure": "Read the GATE-6 entry. There is no independent_review_record in this kit.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "GATE-6 (independent third-party audit) is BLOCKED: no external auditor has reviewed CAIN-42.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "cannot_establish": "That the records describe a real run (they are developer-produced); safety under real network, clock, disk or host faults (the campaign runs four engines in one process); safety against an optimal adversary; correctness of the protocol. Liveness under message loss depends on host load.",
   "evidence_ids": [
    "EV-GATES",
    "EV-QC",
    "EV-FAULT-CAMPAIGN"
   ],
   "id": "CLM-PLAT-04",
   "procedure": "The verifier recomputes the fault-campaign summary from its 2,800 raw trial records (EVIDENCE/fault_campaign) and checks it matches: 25 scenarios x 100 trials on four replicas of the production engine, 2,500 PASS, 0 safety violations, and 300 must-fail control trials that FAIL. Re-running the campaign needs repository access (auditor-kit/fault-campaign/run.sh; FULL_AUDIT_RUNBOOK.md section C).",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "GATE-1: PBFT consensus safety and liveness hold in tested scope (25 fault scenarios, 2,500 trials, 0 safety violations).",
   "status": "PARTIALLY_SUPPORTED",
   "would_falsify": "A reproduced fault scenario with conflicting commits, or two valid certificates for different decisions at the same (epoch, view, sequence)."
  },
  {
   "cannot_establish": "Everything: the kit carries no enforcement evidence beyond the engine's PASSED_TESTED_SCOPE label.",
   "evidence_ids": [],
   "id": "CLM-PLAT-05",
   "procedure": "Not checkable from this kit. Requires repository access and the live probes in PLATFORM_AUDIT/ (section B of FULL_AUDIT_RUNBOOK.md).",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "GATE-3: execution cannot bypass enforcement (no valid capability token -> no execution).",
   "status": "NOT_VERIFIED",
   "would_falsify": ""
  },
  {
   "cannot_establish": "Whether tokens are single-use or unforgeable.",
   "evidence_ids": [],
   "id": "CLM-PLAT-06",
   "procedure": "Developer source inspection (not possible for outside auditors): the default is capability_ttl_seconds = 30.0 in platform-gateway/cain_trust_kernel.py. Single-use nonces are a separate property not evaluated here. Corrected 2026-10-11 at the source (gate engine GATE-4 text, homepage RIG copy, llms.txt, VERIFICATION_CONTRACT.md); scripts/ci/check_contradicted_phrases.py fails CI if a served page asserts the phrase again.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "public_phrase_patterns": [
    "micro-?seconds?[- ]TTLs?",
    "microsecond capability tokens?",
    "microsecond[- ]lifetime"
   ],
   "record_context_patterns": [
    "CLM-PLAT-06",
    "\\bis unsupported\\b",
    "\\bCONTRADICTED\\b"
   ],
   "statement": "GATE-4 evidence text: capability tokens have 'microsecond TTLs'.",
   "status": "CONTRADICTED",
   "would_falsify": "n/a: recorded as contradicted wording in the engine's evidence summary."
  },
  {
   "cannot_establish": "That production evidence logs use these proofs, or that the fixtures cover the edge cases that matter (they are developer-chosen vectors).",
   "evidence_ids": [
    "EV-MERKLE"
   ],
   "id": "CLM-PLAT-07",
   "procedure": "The verifier recomputes every case in EVIDENCE/merkle_fixtures.json with its own implementation.",
   "provenance": "TEST_VECTOR",
   "statement": "GATE-5: RFC 6962 Merkle inclusion/consistency proofs are verified correctly.",
   "status": "PARTIALLY_SUPPORTED",
   "would_falsify": ""
  },
  {
   "cannot_establish": "That the 4 keys belong to 4 independent operators or machines (they are self-published by one operator), that the decision was correct, or that the cluster is live today. The certificate dates from 2026-09-27.",
   "evidence_ids": [
    "EV-QC"
   ],
   "id": "CLM-PLAT-08",
   "procedure": "Checked automatically: signatures recomputed over the documented signing payload.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "A sample commit certificate from cluster cain-mr-02 carries 3 valid Ed25519 signatures out of 4 replica keys.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": ""
  },
  {
   "assertion": {
    "kind": "independent_review_completed",
    "value": false
   },
   "cannot_establish": "n/a",
   "evidence_ids": [],
   "id": "CLM-REVIEW-01",
   "procedure": "There is no independent_review_record in the manifest. HUMAN_REVIEW/ and AI_REVIEW/ describe how one would be produced.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "No independent human or AI review of CAIN-42 or of this kit has been completed.",
   "status": "PENDING_EXTERNAL_REVIEW",
   "would_falsify": ""
  },
  {
   "cannot_establish": "Performance on your hardware; anything about the platform.",
   "evidence_ids": [],
   "id": "CLM-KIT-03",
   "procedure": "Measured results are published next to the ZIP (benchmark JSON bound to the ZIP hash), not inside it, because a kit cannot contain a measurement of itself. Re-run BENCHMARKS/run_benchmark.py.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "The 42-Second Initial Evidence Verdict completes in under 42 seconds under the documented conditions.",
   "status": "NOT_VERIFIED",
   "would_falsify": ""
  },
  {
   "cannot_establish": "n/a",
   "evidence_ids": [],
   "id": "CLM-PRIOR-01",
   "procedure": "The archive served as that kit (cain42-verify.zip, sha256 521509b2...) declares kit_version 5.0.0 and source commit 6085b69b, and it trusts a root key shipped inside itself, so an attacker who re-signs with their own key gets exit 0. See KNOWN_LIMITATIONS.md.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "public_phrase_patterns": [
    "7\\.0\\.0[^\\n]{0,80}KIT_RELEASE_READY",
    "KIT_RELEASE_READY[^\\n]{0,80}7\\.0\\.0"
   ],
   "record_context_patterns": [
    "CLM-PRIOR-01",
    "SUPERSEDED_DEFECTIVE",
    "own signed manifest says",
    "\\bCONTRADICTED\\b"
   ],
   "statement": "Prior public claim: verification kit 7.0.0 is KIT_RELEASE_READY.",
   "status": "CONTRADICTED",
   "would_falsify": "n/a"
  },
  {
   "assertion": {
    "kind": "ip_base_value",
    "scenario": "BASE",
    "value": 16457330
   },
   "cannot_establish": "Market value. The figures come from the developer's own register and are labelled by it 'Internal analytical scenario, NOT an appraisal, NOT a financing valuation, NOT a guarantee'. The per-family values and discounts are the developer's inputs; the kit checks that the totals follow from them, not that the inputs are right. The register's own evidence_gates record third_party_validation=false, tee=false, real_independent_operators=false.",
   "evidence_ids": [
    "EV-IP-VALUATION"
   ],
   "id": "CLM-IP-01",
   "procedure": "Checked automatically: for each scenario the verifier recomputes gross x (1 - deployed discount) = new net, and prior base + new net = total, from EVIDENCE/ip_valuation/CAIN_IP_VALUE_RECALC_V47.json.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "CAIN-42 standalone net IP base value: USD 16,457,330 (BASE); range USD 6,385,360 (LOW) to USD 29,121,750 (HIGH).",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "Any scenario whose recomputed total differs from the stated figure; an independent appraisal materially below it."
  },
  {
   "assertion": {
    "basis": "investor",
    "kind": "company_value",
    "scenario": "BASE",
    "value": 18939330
   },
   "cannot_establish": "Market value. The figures come from the developer's own register and are labelled by it 'Internal analytical scenario, NOT an appraisal, NOT a financing valuation, NOT a guarantee'. The per-family values and discounts are the developer's inputs; the kit checks that the totals follow from them, not that the inputs are right. The register's own evidence_gates record third_party_validation=false, tee=false, real_independent_operators=false. Commercial traction in the record (3 customers, USD 193 founder-attested revenue) is FOUNDER_ATTESTED_UNVERIFIED.",
   "evidence_ids": [
    "EV-IP-VALUATION"
   ],
   "id": "CLM-VAL-01",
   "procedure": "Checked automatically: company value = IP base + stated business premium for every scenario and basis (EVIDENCE/ip_valuation/CAIN_FIRME_AI_AND_FOUNDER_VALUATION_V42.json).",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "FIRME AI company value: USD 18,939,330 (investor, BASE) / USD 19,939,330 (strategic acquirer, BASE); up to USD 31,603,750 / USD 32,603,750 (HIGH).",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "A company value that does not equal IP base + premium; a priced financing or audited valuation materially below it."
  },
  {
   "assertion": {
    "basis": "investor",
    "kind": "founder_value",
    "scenario": "BASE",
    "value": 18939330
   },
   "cannot_establish": "Market value. The figures come from the developer's own register and are labelled by it 'Internal analytical scenario, NOT an appraisal, NOT a financing valuation, NOT a guarantee'. The per-family values and discounts are the developer's inputs; the kit checks that the totals follow from them, not that the inputs are right. The register's own evidence_gates record third_party_validation=false, tee=false, real_independent_operators=false. Paper equity is not liquid value. Ownership is stated by the founder; no incorporation record is in the kit.",
   "evidence_ids": [
    "EV-IP-VALUATION"
   ],
   "id": "CLM-FOUNDER-01",
   "procedure": "Checked automatically: founder paper equity = ownership percentage x company value for every scenario and basis.",
   "provenance": "DEVELOPER_SELF_ATTESTED",
   "statement": "Founder Vincent Noriega (100% owner) paper equity: USD 18,939,330 (investor, BASE) / USD 19,939,330 (strategic, BASE); up to USD 32,603,750 (HIGH).",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "A cap table or incorporation record showing a different ownership share."
  },
  {
   "assertion": {
    "cluster_id": "cain-mr-02",
    "kind": "continuous_operation_hours",
    "min_hours": 72
   },
   "cannot_establish": "That faults were injected during this run (this is continuous operation; the fault-injection soak with a replica killed every 20 minutes runs on cain-mr-01, see CLM-SOAK-MR01). The evidence-root key is operator-published on the operator's own sites. All hosts are on one provider (GATE-2).",
   "evidence_ids": [
    "EV-MR02-OPERATION"
   ],
   "id": "CLM-OPS-72H",
   "procedure": "Checked automatically: every proof's hash, Ed25519 evidence-root signature, hash-chain link from genesis, and replica agreement; then the longest run of OPERATIONAL proofs with no gap over 90 minutes. Embedded quorum certificates: run the published full-chain verifier named in EVIDENCE/mr02_operation/chain_meta.json.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "Cluster cain-mr-02 operated continuously for more than 72 hours: 156.3 hours unbroken (2026-09-27 00:49Z to 2026-10-03 13:08Z), 312 consecutive signed OPERATIONAL proofs, commit sequence 34 to 28,887.",
   "status": "SUPPORTED_WITHIN_TESTED_SCOPE",
   "would_falsify": "A proof in the chain that fails its hash, signature or link; a gap over 90 minutes inside the streak."
  },
  {
   "cannot_establish": "Anything until the run reaches 72 hours; then verify with the bundle's verify_soak.py.",
   "evidence_ids": [],
   "id": "CLM-SOAK-MR01",
   "procedure": "The current run started 2026-10-09 18:16Z and was healthy at 33.9 h (0 divergences) when this kit was built; it is published live at /proof/bundle/soak-multiregion-2026-10-09/. Earlier runs reached at most 53.2 h.",
   "provenance": "DEVELOPER_MEASURED",
   "statement": "A 72-hour fault-injection soak (a random replica killed every 20 minutes) completed on cluster cain-mr-01.",
   "status": "NOT_VERIFIED",
   "would_falsify": "A restart, a commit stall or a divergence before 72 hours."
  }
 ],
 "kit_version": "8.3.2",
 "schema": "cain42.claim_evidence_matrix.v1",
 "status_vocabulary": {
  "BLOCKED": "cannot be evaluated until a blocker is cleared",
  "CONTRADICTED": "available evidence contradicts it",
  "NOT_VERIFIED": "this kit carries no evidence for it",
  "PARTIALLY_SUPPORTED": "some evidence; material parts unverifiable from this kit",
  "PENDING_EXTERNAL_REVIEW": "requires an independent party who has not yet acted",
  "SUPPORTED_WITHIN_TESTED_SCOPE": "evidence in this kit supports the statement within the stated scope",
  "UNSUPPORTED": "no evidence exists"
 }
}