{
 "artifacts": [
  {
   "artifact_id": "EV-FORMAL-PBFT-SPEC",
   "available": true,
   "bytes": 6772,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-09-27T03:04:22Z",
   "description": "TLA+ specification: PBFT commit and view-change safety (N=4, f<=1, Q=3, 1 seq, views 0-1).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tla.txt",
   "public_url": "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tla.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "4b5dbbeda5bd6db9be9707a6e5f9dda1f0ea89656b9040e4ad018e1b134ce238",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-FORMAL-MCP-SPEC",
   "available": true,
   "bytes": 4826,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-09-27T03:04:22Z",
   "description": "TLA+ specification: MCPGate consensus-authorization gate (quorum, action/identity/context binding, expiry, single-use).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tla.txt",
   "public_url": "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tla.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "6a53f85d2ce4d0ac749d556cf0932dee99dbf429b27797285c0e69feb7415fbb",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-FORMAL-PBFT-TLC",
   "available": true,
   "bytes": 2464,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-09-27T03:04:22Z",
   "description": "Raw TLC output for the PBFT model: 3 successful runs (290,806 / 670,340 / 4,198,642 distinct states) and 2 mutants that must violate Agreement.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tlc.json",
   "public_url": "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINPBFTCommitSafety.tlc.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "078d1bc438d8ac7bcf3113c4e8c2ed95799e8a6dcc6bece9f7a28a34536e7fcb",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-FORMAL-MCP-TLC",
   "available": true,
   "bytes": 3739,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-09-27T03:04:22Z",
   "description": "Raw TLC output for the MCPGate model: 2 successful runs (553,996 / 1,591,308 distinct states) and 6 mutants each violating exactly the check removed.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tlc.json",
   "public_url": "https://cainstudio.online/proof/bundle/formal-2026-09-27/CAINMCPGateAuthorization.tlc.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "611048f422608b0ce3399d78dd437bc45c8638198e06b71eadc64e9901a8d712",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-FORMAL-REPRODUCE",
   "available": true,
   "bytes": 2648,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-09-27T03:05:06Z",
   "description": "Exact TLC commands, model bounds, Java/TLA+ tool requirement, and an explicit list of what is NOT claimed.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/formal-2026-09-27/REPRODUCE.txt",
   "public_url": "https://cainstudio.online/proof/bundle/formal-2026-09-27/REPRODUCE.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "9d1d31bb2e8cc63326cd729f8b1cd2d149c9250bb653745be4d99776b931aa56",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-TEST-MANIFEST",
   "available": true,
   "bytes": 2600494,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-09-28T17:48:40Z",
   "description": "Per-suite, per-test manifest behind the 1,963/1,978 figure (2.6 MB; large report, split by suite).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/TEST_MANIFEST.json",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/TEST_MANIFEST.json",
   "redactions": "suite source paths are operator-host paths; the repository is not published as a git remote by operator directive",
   "release_version": "4.0.0",
   "sha256": "c6f3ca8aa8498db68ce6ecfc7f9265c2aeededd495007edd36934f875fdac0f2",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-TEST-JUNIT-SITE",
   "available": true,
   "bytes": 15863,
   "content_type": "text/xml",
   "creation_timestamp_utc": "2026-09-28T17:41:58Z",
   "description": "JUnit XML for the site suite.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/junit/site.xml",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/junit/site.xml",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "84c88f7236cee2af2c305e6f3621b1e10bbce92069af08a92b7814f0174d3620",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-TEST-JUNIT-GATEWAY",
   "available": true,
   "bytes": 53807,
   "content_type": "text/xml",
   "creation_timestamp_utc": "2026-09-28T17:42:13Z",
   "description": "JUnit XML for the gateway suite.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/junit/gateway.xml",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/junit/gateway.xml",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "e30be23d3368e2175a706c0985c76cdd4ea351999e570f61f8b8e04341cdd3b8",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-TEST-JUNIT-HYPERVISOR",
   "available": true,
   "bytes": 86921,
   "content_type": "text/xml",
   "creation_timestamp_utc": "2026-09-28T17:42:53Z",
   "description": "JUnit XML for the hypervisor suite.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/junit/hypervisor.xml",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/junit/hypervisor.xml",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "39f9daf1932e090204cddb270d059ea40bc802c62f48a50825b16261b45b5490",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-TEST-JUNIT-L5",
   "available": true,
   "bytes": 48257,
   "content_type": "text/xml",
   "creation_timestamp_utc": "2026-09-28T17:42:34Z",
   "description": "JUnit XML for the L5 governance suite.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/junit/l5-governance.xml",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/junit/l5-governance.xml",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "c4853aabbbf17a027c4088dcff5a45bc4a645702165e1bc936882cc59d98cc7f",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-TEST-JUNIT-MCP",
   "available": true,
   "bytes": 5691,
   "content_type": "text/xml",
   "creation_timestamp_utc": "2026-09-28T17:42:57Z",
   "description": "JUnit XML for the MCP enforcement suite.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/junit/mcp-enforcement.xml",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/junit/mcp-enforcement.xml",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "aa9986bd3858b8b48e98a9dc254b30050543d6a1cccd33f55a74ed886207a6a7",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-TEST-JUNIT-BYZANTINE",
   "available": true,
   "bytes": 60803,
   "content_type": "text/xml",
   "creation_timestamp_utc": "2026-09-28T17:48:40Z",
   "description": "JUnit XML for the Byzantine consensus suite.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/junit/byzantine.xml",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/junit/byzantine.xml",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "d63e10ffe8ffb97395a11ebead9c029ada99c26ee3c7a3a608d704e20d2cc308",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PERF-INDEX",
   "available": true,
   "bytes": 4955,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-09-30T02:40:23Z",
   "description": "Performance index: each benchmark with the required conditions present/missing; incomplete benchmarks are marked not quotable.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/proof-fabric/PERFORMANCE_INDEX.json",
   "public_url": "https://cainstudio.online/proof/bundle/proof-fabric/PERFORMANCE_INDEX.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "a99c42e9d6f0a9cad90ed3adb20f7404c6a7cda74d9993ce5c245d1edd94c9f2",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PBFT-QC-BUNDLE",
   "available": true,
   "bytes": 946231,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-09-24T23:10:12Z",
   "description": "Sanitized sample PBFT authorization + quorum certificates from a disposable 4-node cluster (>=3-of-4 pinned Ed25519 members).",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/pbft-evolution2-2026-09-24/PBFT_QC_BUNDLE.json",
   "public_url": "https://cainstudio.online/proof/bundle/pbft-evolution2-2026-09-24/PBFT_QC_BUNDLE.json",
   "redactions": "disposable cluster, not the live cain-mr-01/02 deployment; private keys never published",
   "release_version": "4.0.0",
   "sha256": "f96088a8edf710b38b3cf22a7c25dd04e2758f7ff7ae9583b8eddf4b04cb2dde",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PBFT-QC-VERIFIER",
   "available": true,
   "bytes": 20717,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-09-24T23:10:12Z",
   "description": "Standalone offline QC verifier (no CAIN service, pinned keys, rejects duplicate/unknown signers, enforces quorum).",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/pbft-evolution2-2026-09-24/verify_pbft_qc_bundle.py.txt",
   "public_url": "https://cainstudio.online/proof/bundle/pbft-evolution2-2026-09-24/verify_pbft_qc_bundle.py.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "ba452ce42528f11f7f5235727a65cae25a34072bc52b4711fd72581615d06009",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PBFT-QC-VERIFIER-OUTPUT",
   "available": true,
   "bytes": 2608,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-09-24T23:10:12Z",
   "description": "Expected verifier output for the sample QC bundle.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/pbft-evolution2-2026-09-24/VERIFIER_OUTPUT.txt",
   "public_url": "https://cainstudio.online/proof/bundle/pbft-evolution2-2026-09-24/VERIFIER_OUTPUT.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "11cb9d0b8fd2bcb94e81064543107e89d3f76a3a10b209e17dba16a1681d1f86",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-HOURLY-LATEST",
   "available": true,
   "bytes": 1855,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:23:55Z",
   "description": "Latest hourly signed cluster proof for cain-mr-01 (verdict, per-replica view/height/state, signature).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/hourly-proof/latest.json",
   "public_url": "https://cainstudio.online/proof/bundle/hourly-proof/latest.json",
   "redactions": "host IPs are not included in the proof body",
   "release_version": "4.0.0",
   "sha256": "acb165b92e51f97743ad071a298773abb8cc563691421bfe259d26e0974874f5",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-HOURLY-INDEX",
   "available": true,
   "bytes": 102133,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:23:55Z",
   "description": "Full hourly-proof chain for cain-mr-01 (each proof hash-chained to the previous), with membership and evidence-root key.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/hourly-proof/index.json",
   "public_url": "https://cainstudio.online/proof/bundle/hourly-proof/index.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "44fcecdc269dbf7dff03f204d885737e95977a7c84f386a98c750fb38770d764",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-HOURLY-REPRODUCE",
   "available": true,
   "bytes": 734,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-10-09T16:23:55Z",
   "description": "Reproduction instructions for the hourly proofs.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/hourly-proof/REPRODUCE.txt",
   "public_url": "https://cainstudio.online/proof/bundle/hourly-proof/REPRODUCE.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "0a0328af37011683ca4c52fbf18c9336aa4be83f8935302ae83f2e1cc29444ec",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-SOAK-HEARTBEAT",
   "available": true,
   "bytes": 480,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:45:11Z",
   "description": "Live heartbeat of the current multi-region soak: elapsed hours, injected faults, divergences, state.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/soak-multiregion-2026-10-06/heartbeat.json",
   "public_url": "https://cainstudio.online/proof/bundle/soak-multiregion-2026-10-06/heartbeat.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "91e589657797af34c442e50ebb78358b868cccf7a58720240b2bd333b07ba0b1",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-SOAK-REPRODUCE",
   "available": true,
   "bytes": 649,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-10-08T06:06:05Z",
   "description": "Reproduction instructions for the soak, including what is NOT claimed.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/soak-multiregion-2026-10-06/REPRODUCE.txt",
   "public_url": "https://cainstudio.online/proof/bundle/soak-multiregion-2026-10-06/REPRODUCE.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "9d6374acc0ace70b2c7df88007fd96000897ed7b707cbfc5510e4e9aaf0394d5",
   "source_commit": null,
   "superseded_by": null
  },
  {
   "artifact_id": "EV-LIVE-CLUSTER-STATUS",
   "available": false,
   "content_type": "text/plain",
   "description": "Live per-replica PBFT status for cain-mr-01 (view, commit index, state hash, quorum health).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "note": "not present on disk at build time; fetch the public_url",
   "producer": "OPERATOR_GENERATED",
   "public_path": "/api/v1/live-cluster/status",
   "public_url": "https://cainstudio.online/api/v1/live-cluster/status",
   "redactions": "overlay addresses are not exposed; regions are shown",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-LIVE-CLUSTER-MEMBERSHIP",
   "available": false,
   "content_type": "text/plain",
   "description": "Live cluster membership: member ids, Ed25519 public keys, configuration hash.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "note": "not present on disk at build time; fetch the public_url",
   "producer": "OPERATOR_GENERATED",
   "public_path": "/api/v1/live-cluster/membership",
   "public_url": "https://cainstudio.online/api/v1/live-cluster/membership",
   "redactions": "none",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-KEYS",
   "available": false,
   "content_type": "application/json",
   "description": "Published replica Ed25519 verification keys (pinned membership).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "note": "not present on disk at build time; fetch the public_url",
   "producer": "OPERATOR_GENERATED",
   "public_path": "/.well-known/cain-keys.json",
   "public_url": "https://cainstudio.online/.well-known/cain-keys.json",
   "redactions": "none",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-DEPLOY-MR01",
   "available": true,
   "bytes": 1413,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:45:25Z",
   "description": "Redacted deployment record for cain-mr-01 (replica ids, regions, provider); public host IPs removed.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/artifacts/deploy-cain-mr-01.redacted.json",
   "public_url": "https://cainstudio.online/evidence/artifacts/deploy-cain-mr-01.redacted.json",
   "redactions": "public_host fields redacted; this weakens geographic verification and is stated in deployment.json",
   "release_version": "4.0.0",
   "sha256": "6479c53ba9c1c7e8a1c590ef98fb9ff435e0bc40e9c0431a611b58b70449f713",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-DEPLOY-MR02",
   "available": true,
   "bytes": 1439,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:45:25Z",
   "description": "Redacted deployment record for cain-mr-02 (4 hosts, one replica each; atl/lax/mia/sjc); public host IPs removed.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/artifacts/deploy-cain-mr-02.redacted.json",
   "public_url": "https://cainstudio.online/evidence/artifacts/deploy-cain-mr-02.redacted.json",
   "redactions": "public_host fields redacted",
   "release_version": "4.0.0",
   "sha256": "fbfd28d1573923af6c27597b0d85d7717e1c1d7ab5eff490f8b4b568923429af",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-REMEDIATION-LOG",
   "available": true,
   "bytes": 32119,
   "content_type": "text/markdown",
   "creation_timestamp_utc": "2026-10-07T17:36:56Z",
   "description": "Remediation log including the historical zero-valid-signature defects and their fixes/tests.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/top100-remediation-2026-10-07/REMEDIATION_LOG.md",
   "public_url": "https://cainstudio.online/proof/bundle/top100-remediation-2026-10-07/REMEDIATION_LOG.md",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "7d24ecbe10e7796cc013c8c0fab51515193ee846e0450ae67b09bc585c71ec5a",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-CLAIMS",
   "available": true,
   "bytes": 27427,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:16:37Z",
   "description": "The public claims registry (this document).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/claims.json",
   "public_url": "https://cainstudio.online/evidence/claims.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "5fb3c1a77aef78ff1bd9a684c3ee33aebbf080ac114a3633595900d4be696dc5",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-MANIFEST",
   "available": true,
   "bytes": 38970,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:41:17Z",
   "description": "Machine-readable artefact index (this document).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/manifest.json",
   "public_url": "https://cainstudio.online/evidence/manifest.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "c5515a972c3b5dc092d3221899588e4654f86307bff9e8f94bced49225ef4298",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-DEPLOYMENT",
   "available": true,
   "bytes": 10985,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:17:19Z",
   "description": "Deployment and consensus protocol manifest.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/deployment.json",
   "public_url": "https://cainstudio.online/evidence/deployment.json",
   "redactions": "host IPs redacted",
   "release_version": "4.0.0",
   "sha256": "e1af4244b926e0dc3c5378136616f52a0fe5ffe867bc41ea9198ef21de5fe031",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-LIMITATIONS",
   "available": true,
   "bytes": 5496,
   "content_type": "text/markdown",
   "creation_timestamp_utc": "2026-10-09T16:18:02Z",
   "description": "Known limitations of the CAIN-42 evidence and deployment.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/known-limitations.md",
   "public_url": "https://cainstudio.online/evidence/known-limitations.md",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "ba6f8623873429fae36126464f722624617a93bb0b16a45b1ebb8bb8f508dbcf",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-CHANGELOG",
   "available": true,
   "bytes": 5543,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:18:02Z",
   "description": "Changelog of material claim changes, each linked to evidence.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/changelog.json",
   "public_url": "https://cainstudio.online/evidence/changelog.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "b17816ad4e68abbfda1e1b7f23333878a11c4369823ac258ccfdfd0cc58ca335",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-REPRODUCE",
   "available": true,
   "bytes": 5079,
   "content_type": "text/markdown",
   "creation_timestamp_utc": "2026-10-09T16:18:27Z",
   "description": "Step-by-step reproduction instructions for every check.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/HOW_TO_REPRODUCE.md",
   "public_url": "https://cainstudio.online/evidence/HOW_TO_REPRODUCE.md",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "b824623710cb1435b1fbd4f1f4e1a821c7b6db413d6fb6783327306eb4503b36",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-STATUS",
   "available": true,
   "bytes": 2262,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:18:27Z",
   "description": "Current status snapshot (server-generated UTC timestamp; stale indicator; measurement source).",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/status.json",
   "public_url": "https://cainstudio.online/evidence/status.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "b4ac3c7033d48181d57b8b07ce4731b4e8451a8d76ee03e1d85d5b252bf10349",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PACK-VERIFY-ALL",
   "available": true,
   "bytes": 5717,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-10-09T16:19:25Z",
   "description": "One-command independent verification entry point (offline by default; --online adds read-only public checks).",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/verification-pack/verify_all.py",
   "public_url": "https://cainstudio.online/evidence/verification-pack/verify_all.py",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "737866130cc5c83a368399712fddb1e2ecf893603172fa51ec036da42a8dff36",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PACK-README",
   "available": true,
   "bytes": 2541,
   "content_type": "text/markdown",
   "creation_timestamp_utc": "2026-10-09T16:18:59Z",
   "description": "Verification pack README: contents, run instructions, and what reproduction does/does not prove.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/verification-pack/README.md",
   "public_url": "https://cainstudio.online/evidence/verification-pack/README.md",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "8454441a89c0411086439da33185b813370ba380887aeffd8cd3ac66f4b46910",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PACK-MANIFEST",
   "available": true,
   "bytes": 1886,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:19:45Z",
   "description": "SHA-256 of every file in the verification pack.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/verification-pack/MANIFEST.json",
   "public_url": "https://cainstudio.online/evidence/verification-pack/MANIFEST.json",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "c9f84fd4a4b1cf9a9562e392cd7c24181a3196c723fd30841e8468580e707fb7",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PACK-REQUIREMENTS",
   "available": true,
   "bytes": 157,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-10-09T16:19:25Z",
   "description": "Pinned Python dependency for the certificate verifier.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/verification-pack/requirements.txt",
   "public_url": "https://cainstudio.online/evidence/verification-pack/requirements.txt",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "1f6f99617c5fcfcc1fd6b3d77d5b54c7ca6aa9d9b6b3215532c7888249e98342",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PACK-HOURLY-VERIFIER",
   "available": true,
   "bytes": 5248,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-10-09T16:19:45Z",
   "description": "Standalone verifier for the hourly signed proof chain.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/verification-pack/verify_hourly_proofs.py",
   "public_url": "https://cainstudio.online/evidence/verification-pack/verify_hourly_proofs.py",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "0618d8d62c0b2ced032a44957bb739af70f6f7d0f0f2a25ddac02dc40c67e30d",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-PACK-SOAK-VERIFIER",
   "available": true,
   "bytes": 8568,
   "content_type": "text/plain",
   "creation_timestamp_utc": "2026-10-09T16:19:45Z",
   "description": "Standalone verifier for soak checkpoint signatures and hash-chaining.",
   "evidence_category": "REPRODUCIBLE",
   "evidence_class": "REPRODUCIBLE",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/verification-pack/verify_soak.py",
   "public_url": "https://cainstudio.online/evidence/verification-pack/verify_soak.py",
   "redactions": "none",
   "release_version": "4.0.0",
   "sha256": "8d9f0a48faf4fea54c38c3795d8b76103cf3dfb3bc92ffe0709a5c9825c7141d",
   "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-INVENTORY",
   "available": false,
   "content_type": "application/json",
   "description": "Complete hashed inventory of every public evidence artefact served read-only.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "note": "dynamic or self-referential; fetch the public_url",
   "producer": "OPERATOR_GENERATED",
   "public_path": "/evidence/inventory.json",
   "public_url": "https://cainstudio.online/evidence/inventory.json",
   "redactions": "private keys, host/overlay addresses and implementation source are not part of the evidence surface",
   "superseded_by": null
  },
  {
   "artifact_id": "EV-CORE-BUNDLE",
   "available": true,
   "bytes": 4757,
   "content_type": "application/json",
   "creation_timestamp_utc": "2026-10-09T16:42:06Z",
   "description": "Small external-review core bundle: README, manifest, publisher attestation + key, verifier, one quorum certificate, keys/membership, schema, negative fixtures, test reconciliation, formal summary, enforcement statement, soak verdict, corrected E42 verifier + assurance suite, known limitations.",
   "evidence_category": "OPERATOR_MEASURED",
   "evidence_class": "OPERATOR_MEASURED",
   "measurement_end_utc": null,
   "measurement_start_utc": null,
   "producer": "OPERATOR_GENERATED",
   "public_path": "/proof/bundle/review-core-2026-10-09/MANIFEST.json",
   "public_url": "https://cainstudio.online/proof/bundle/review-core-2026-10-09/MANIFEST.json",
   "redactions": "verification artefacts only; source and private keys withheld",
   "release_version": "4.0.0",
   "sha256": "91200c3e2a643ba1a7c4e9d36a9d526559759420a95811c451d1379df0fe330d",
   "source_commit": null,
   "superseded_by": null
  }
 ],
 "categories_are_not_equivalent": [
  "publisher_authentication",
  "artifact_integrity",
  "report_consistency",
  "recomputed_semantics",
  "re_executed_tests",
  "live_observation",
  "independent_reproduction"
 ],
 "core_bundle": "https://cainstudio.online/proof/bundle/review-core-2026-10-09/MANIFEST.json",
 "deployed_release": "4.0.0",
 "generated_at_utc": "2026-10-09T16:45:25Z",
 "generator": "scripts/build_public_evidence_package.py",
 "latest_pointers": {
  "changelog": "https://cainstudio.online/evidence/changelog.json",
  "claims": "https://cainstudio.online/evidence/claims.json",
  "deployment": "https://cainstudio.online/evidence/deployment.json",
  "known_limitations": "https://cainstudio.online/evidence/known-limitations.md",
  "reproduce": "https://cainstudio.online/evidence/HOW_TO_REPRODUCE.md",
  "status": "https://cainstudio.online/evidence/status.json"
 },
 "limitations": [
  "All artefacts are operator-generated; independent reproduction is 0.",
  "Verification artefacts only: implementation source, private keys and host details are withheld.",
  "The 72-hour soak is NOT_ESTABLISHED (in progress).",
  "Enforcement bypass-resistance demonstrations are NOT_ESTABLISHED.",
  "Report-consistency passes are self-consistency, not observed behaviour."
 ],
 "notes": [
  "Byte sizes and SHA-256 digests are computed from the local file at build time.",
  "creation_timestamp_utc is the file mtime and is labelled as such, not a signed assertion.",
  "A digest proves the bytes were not altered after this manifest was generated; it does not prove who produced them."
 ],
 "package_id": "cain42-review-core",
 "package_version": "2026.10.09",
 "public_base": "https://cainstudio.online",
 "published_utc": "2026-10-09T16:51:29Z",
 "publisher": "CAIN-42 operator (FIRME AI; pre-incorporation)",
 "readme": "https://cainstudio.online/evidence/",
 "release_version": "4.0.0",
 "schema": "cain42.public.evidence_manifest.v1",
 "source_commit": "9eac4b17907971833089d6b8b133cf7a0665f70f",
 "source_commit_time_utc": "2026-10-09T16:45:25Z"
}