{
 "schema": "cain42.kit_evidence_slot.v1",
 "slot": "evolution-14-sovereign-launchpad",
 "title": "Evolution 14: separate signed services, verifiable releases, secure updates, fault injection, 72-hour soak (running)",
 "owner_session": "cain-studio-platform-82",
 "summary": "CAIN-42's execution path runs as separate OS processes with their own keys, signing every request and response; the gate re-checks every decision itself. 26 injected failures kept safety; 16 update attacks and 13 tampered releases were refused; the release rebuilds byte for byte. A 72-hour soak of the signed 0.14.0 release is running and is NOT complete. Production is NOT approved.",
 "status_labels": {
  "MULTI_SERVICE_DEPLOYMENT_VERIFIED": "YES",
  "MULTI_HOST_DEPLOYMENT_VERIFIED": "NO",
  "BUILD_PROVENANCE_VERIFIED": "PARTIAL",
  "ARTIFACT_SIGNATURES_VERIFIED": "PARTIAL",
  "SECURE_UPDATE_VERIFIED": "YES",
  "72_HOUR_SOAK_COMPLETED": "OPEN",
  "MULTI_OPERATOR_INDEPENDENCE_VERIFIED": "NO",
  "HARDWARE_ATTESTATION_VERIFIED": "NO",
  "EXTERNAL_REVIEW_COMPLETED": "NO",
  "PRODUCTION_RELEASE_APPROVED": "BLOCKED"
 },
 "files": [
  {
   "path": "FINAL_REPORT.md",
   "kind": "report",
   "describes": "final report and release labels"
  },
  {
   "path": "release_gates.json",
   "kind": "result",
   "describes": "gates A-Q"
  },
  {
   "path": "baseline.json",
   "kind": "result",
   "describes": "454/454 regression baseline"
  },
  {
   "path": "e13_fix_mutation_check.json",
   "kind": "result",
   "describes": "Evolution 13 defects re-introduced: 5/5 caught"
  },
  {
   "path": "failure_injection_results.json",
   "kind": "result",
   "describes": "26 fault scenarios"
  },
  {
   "path": "update_security_results.json",
   "kind": "result",
   "describes": "16 TUF/update scenarios"
  },
  {
   "path": "release_verification.json",
   "kind": "result",
   "describes": "release verification + 13 tamper tests + reproducible rebuild"
  },
  {
   "path": "build_provenance.json",
   "kind": "data",
   "describes": "in-toto/SLSA provenance (DSSE)"
  },
  {
   "path": "artifact_signatures.json",
   "kind": "data",
   "describes": "signed release manifest + release policy (public keys)"
  },
  {
   "path": "sbom.json",
   "kind": "data",
   "describes": "CycloneDX SBOM"
  },
  {
   "path": "service_health_results.json",
   "kind": "result",
   "describes": "health/readiness/auth"
  },
  {
   "path": "evolution13_regression.json",
   "kind": "result",
   "describes": "F13 fixes under the deployment + F14 hardening"
  },
  {
   "path": "soak_plan.json",
   "kind": "data",
   "describes": "soak plan"
  },
  {
   "path": "soak72_plan_as_run.json",
   "kind": "data",
   "describes": "plan of the running soak"
  },
  {
   "path": "soak72_records_snapshot.jsonl",
   "kind": "data",
   "describes": "hash-chained soak records at build time (partial run)"
  },
  {
   "path": "soak_results.json",
   "kind": "result",
   "describes": "soak status: OPEN"
  },
  {
   "path": "sample_deployment_export/export.json",
   "kind": "data",
   "describes": "a real deployment export"
  },
  {
   "path": "sample_deployment_export/trust.public.json",
   "kind": "data",
   "describes": "its public keys"
  },
  {
   "path": "unresolved_register.json",
   "kind": "result",
   "describes": "open items"
  },
  {
   "path": "operator_readiness.json",
   "kind": "data",
   "describes": "operator procedure (not executed)"
  },
  {
   "path": "attestation_assessment.json",
   "kind": "data",
   "describes": "no TEE"
  },
  {
   "path": "independent_verification_guide.md",
   "kind": "report",
   "describes": "how to verify"
  },
  {
   "path": "deployment_architecture.md",
   "kind": "report",
   "describes": "architecture"
  },
  {
   "path": "research_matrix.json",
   "kind": "data",
   "describes": "primary sources"
  },
  {
   "path": "product_mapping.json",
   "kind": "data",
   "describes": "Top-100 mapping"
  },
  {
   "path": "EVOLUTION14_MANIFEST.json",
   "kind": "manifest",
   "describes": "sha256 of the evidence"
  },
  {
   "path": "verify.py",
   "repo_path": "cain-launchpad-verify/verify.py",
   "kind": "verifier",
   "describes": "clean-room verifier, no CAIN imports (deployment, release, soak)"
  }
 ],
 "verify_commands": [
  "python3 -I verify.py deployment sample_deployment_export/export.json --trust sample_deployment_export/trust.public.json",
  "python3 -I verify.py soak soak72_records_snapshot.jsonl --require-hours 72   # exit 3 until the run completes"
 ],
 "limitations": [
  "one host: separate processes, not separate machines or organizations",
  "release tarball (implementation source) is not published, so outsiders get UNAVAILABLE for artifact_hash",
  "builder and approver keys held by one person",
  "soak not complete"
 ]
}