{
 "schema": "cain42.kit_evidence_slot.v1",
 "slot": "evolution-16-durable-mission-runtime",
 "title": "Evolution 16 of 42 (Project Sovereign Frontier): durable mission runtime, contract succession, write-ahead dispatch, clean-room journal verifier",
 "owner_session": "cain-studio-platform-fa5efc01",
 "summary": "A governed agent mission now survives a crash: every request and decision is journaled and replayed, authority is re-checked when a tool is called, and an action with an unknown outcome is never repeated until a pinned observer signs what happened. 0 of 690 fault and attack scenarios ended badly (previous code: 330 of 420 comparable); 71 of 71 crash points recovered with 0 duplicate writes; 25/25 mutants killed; 16,104 enumerated sequences, 0 violations. Two defects in existing code fixed (F16-01, F16-02). Local simulator, no LLM; not wired to MCPGate; production NOT APPROVED.",
 "status_labels": {
  "DURABLE_RUNTIME_IMPLEMENTED": "YES",
  "TESTED": "YES (local simulator)",
  "ZERO_IMPORT_JOURNAL_VERIFIER": "YES",
  "WIRED_TO_MCPGATE": "NO",
  "INDEPENDENTLY_REPRODUCED": "NO",
  "EXTERNAL_REVIEW_COMPLETED": "NO",
  "PRODUCTION_RELEASE_APPROVED": "BLOCKED"
 },
 "files": [
  {
   "path": "FINAL_REPORT.md",
   "kind": "report",
   "describes": "final report"
  },
  {
   "path": "test_results.md",
   "kind": "report",
   "describes": "every measured number and its source file"
  },
  {
   "path": "release_gates.md",
   "kind": "report",
   "describes": "gates A-R; production NOT APPROVED"
  },
  {
   "path": "limitations_and_open_risks.md",
   "kind": "report",
   "describes": "open risks U16-01..11, incident disclosed"
  },
  {
   "path": "architecture.md",
   "kind": "report",
   "describes": "architecture"
  },
  {
   "path": "mission_contract_spec.md",
   "kind": "report",
   "describes": "contract succession specification"
  },
  {
   "path": "recovery_execution_spec.md",
   "kind": "report",
   "describes": "write-ahead dispatch and recovery specification"
  },
  {
   "path": "research_prior_art.md",
   "kind": "report",
   "describes": "prior art, abstract level"
  },
  {
   "path": "threat_model.md",
   "kind": "report",
   "describes": "threat model"
  },
  {
   "path": "failure_mode_analysis.md",
   "kind": "report",
   "describes": "FMEA"
  },
  {
   "path": "formal_assurance.md",
   "kind": "report",
   "describes": "bounded methods, not proofs"
  },
  {
   "path": "baseline.md",
   "kind": "report",
   "describes": "baseline reproduction"
  },
  {
   "path": "test_plan.md",
   "kind": "report",
   "describes": "metric definitions"
  },
  {
   "path": "self_improvement_controls.md",
   "kind": "report",
   "describes": "finding: nothing new built"
  },
  {
   "path": "top100_delta.md",
   "kind": "report",
   "describes": "registry unchanged"
  },
  {
   "path": "ip_register_delta.md",
   "kind": "report",
   "describes": "register v47 delta, per-step totals"
  },
  {
   "path": "valuation_methodology.md",
   "kind": "report",
   "describes": "valuation method"
  },
  {
   "path": "ip_register_delta.json",
   "kind": "result",
   "describes": "register v47 delta"
  },
  {
   "path": "recovery_lab_results.json",
   "kind": "result",
   "describes": "1230 scenarios over 3 seeds + crash sweep"
  },
  {
   "path": "recovery_lab_seed16.json",
   "kind": "result",
   "describes": "seed 16"
  },
  {
   "path": "recovery_lab_seed17.json",
   "kind": "result",
   "describes": "seed 17"
  },
  {
   "path": "recovery_lab_seed18.json",
   "kind": "result",
   "describes": "seed 18"
  },
  {
   "path": "mutation_results.json",
   "kind": "result",
   "describes": "25/25 mutants killed"
  },
  {
   "path": "bounded_exploration.json",
   "kind": "result",
   "describes": "16104 sequences, 0 violations"
  },
  {
   "path": "found_defect_probes.json",
   "kind": "result",
   "describes": "F16-01/F16-02 before and after"
  },
  {
   "path": "performance_results.json",
   "kind": "result",
   "describes": "latency, tmpfs and ext4"
  },
  {
   "path": "regression_results.json",
   "kind": "result",
   "describes": "regression suites"
  },
  {
   "path": "evolution15_longhorizon_rerun_seed15.json",
   "kind": "result",
   "describes": "Evolution 15 rerun"
  },
  {
   "path": "EVOLUTION16_MANIFEST.json",
   "kind": "manifest",
   "describes": "SHA-256 of sources and artifacts (self-asserted)"
  },
  {
   "path": "sample/mission.journal.jsonl",
   "kind": "sample",
   "describes": "a complete mission journal"
  },
  {
   "path": "sample/trust.public.json",
   "kind": "sample",
   "describes": "public keys for the sample (test keys)"
  },
  {
   "path": "sample/head.json",
   "kind": "sample",
   "describes": "signed journal head"
  },
  {
   "path": "sample/verification.json",
   "kind": "result",
   "describes": "verifier output on the sample: VERIFIED"
  },
  {
   "path": "verify_mission_journal.py",
   "repo_path": "cain-mission-journal-verify/verify.py",
   "kind": "verifier",
   "describes": "clean-room mission journal verifier, no CAIN imports (Python 3 + cryptography)"
  }
 ],
 "verify_commands": [
  "python3 -I verify_mission_journal.py sample/mission.journal.jsonl --trust sample/trust.public.json --head sample/head.json --require-final",
  "python3 -c \"import json;d=json.load(open('recovery_lab_results.json'))['totals'];print(d['new_bad'],d['fault_and_attack_executed'],d['baseline_bad'],d['comparable'])\""
 ],
 "limitations": [
  "deterministic local simulator; no language model, no real tool; all keys in one process",
  "a pinned observer that signs something false is not detected (measured)",
  "the runtime source is not published; the verifier and the sample journal can be re-run",
  "durable mode is about 28x slower per decision than in-memory (fsync, ext4)",
  "written and tested by the CAIN-42 project; no outside reproduction or review"
 ]
}