{
 "schema": "cain42.kit_evidence_slot.v1",
 "slot": "evolution-15-governed-agentic-runtime",
 "title": "Evolution 15: governed multi-agent missions, long-horizon attacks, self-anchored signature fixes",
 "owner_session": "cain-studio-platform-82",
 "summary": "A governed runtime now binds every agent action to the signed mission, the agent's live delegated authority, trusted facts and approved plan changes. In a deterministic simulator it admitted 0 of 1,650 long-horizon attack variants and completed all 600 benign ones; a per-call check admitted 1,425 of the same attacks. Five verifiers that trusted keys embedded in records were found and fixed. No LLM was in the loop; production is BLOCKED.",
 "status_labels": {
  "RUNTIME_GOVERNANCE_IMPLEMENTED": "YES",
  "LONG_HORIZON_EVALUATION": "YES (simulated)",
  "FORMAL_MODEL_CHECKING": "NO",
  "INDEPENDENT_DECISION_VERIFIER": "OPEN",
  "EXTERNAL_REVIEW_COMPLETED": "NO",
  "PRODUCTION_RELEASE_APPROVED": "BLOCKED"
 },
 "files": [
  {
   "path": "FINAL_REPORT.md",
   "kind": "report",
   "describes": "final report"
  },
  {
   "path": "release_gates.json",
   "kind": "result",
   "describes": "gates A-P"
  },
  {
   "path": "evaluation_results.json",
   "kind": "result",
   "describes": "1,650 attack + 600 benign variants, 3 seeds"
  },
  {
   "path": "evaluation_seed15.json",
   "kind": "result",
   "describes": "seed 15 raw"
  },
  {
   "path": "evaluation_seed16.json",
   "kind": "result",
   "describes": "seed 16 raw"
  },
  {
   "path": "evaluation_seed17.json",
   "kind": "result",
   "describes": "seed 17 raw"
  },
  {
   "path": "runtime_mutation_results.json",
   "kind": "result",
   "describes": "10/10 runtime checks proven necessary"
  },
  {
   "path": "long_horizon_attack_corpus.json",
   "kind": "result",
   "describes": "attack families"
  },
  {
   "path": "scenario_registry.json",
   "kind": "result",
   "describes": "scenarios and seeds"
  },
  {
   "path": "open_defects.json",
   "kind": "result",
   "describes": "F15-01..06"
  },
  {
   "path": "f15_01_probe_BEFORE_fix.json",
   "kind": "result",
   "describes": "forgery accepted before fix"
  },
  {
   "path": "f15_01_probe_AFTER_fix.json",
   "kind": "result",
   "describes": "forgery refused after fix"
  },
  {
   "path": "objective_integrity_results.json",
   "kind": "result",
   "describes": "objective drift"
  },
  {
   "path": "memory_attack_results.json",
   "kind": "result",
   "describes": "memory poisoning"
  },
  {
   "path": "delegation_attack_results.json",
   "kind": "result",
   "describes": "delegation attacks"
  },
  {
   "path": "agent_runtime_architecture.md",
   "kind": "report",
   "describes": "architecture"
  },
  {
   "path": "multi_agent_threat_model.md",
   "kind": "report",
   "describes": "threat model"
  },
  {
   "path": "evaluation_methodology.md",
   "kind": "report",
   "describes": "method"
  },
  {
   "path": "research_matrix.json",
   "kind": "result",
   "describes": "primary sources"
  },
  {
   "path": "ip_candidate_register.json",
   "kind": "result",
   "describes": "IP candidates (register v46)"
  },
  {
   "path": "ip_delta.json",
   "kind": "result",
   "describes": "IP delta + company/founder v41"
  },
  {
   "path": "unresolved_register.json",
   "kind": "result",
   "describes": "open items"
  },
  {
   "path": "public_claims_matrix.json",
   "kind": "result",
   "describes": "what may and may not be claimed"
  },
  {
   "path": "EVOLUTION15_MANIFEST.json",
   "kind": "result",
   "describes": "sha256 of the evidence"
  }
 ],
 "verify_commands": [
  "python3 -c \"import json;d=json.load(open('evaluation_results.json'));print(d['governed_attack_success'],d['attack_executed'],d['baseline_attack_success'])\""
 ],
 "limitations": [
  "deterministic simulator, no LLM",
  "the runtime source is not published: results can be inspected, not re-run, without repository access",
  "no zero-import verifier for runtime decisions yet"
 ]
}