{
 "claims": [
  {
   "assumptions": "operator-signed deploy record is accurate",
   "claim": "Four-replica consensus deployment",
   "component": "PBFT cluster cain-mr-02",
   "environment": "multi-host (Vultr), single operator",
   "evidence": [
    "deployment_manifest.json",
    "certificate_samples/qc_sample.json"
   ],
   "falsifies": "a deploy record showing <4 replicas or all replicas on one host",
   "historical_note": "an earlier single-host 4-container cluster is preserved in AGENTS.md",
   "id": "C1",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "all four replicas share one provider and one operator; independent administrative/geographic control is NOT ESTABLISHED",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "inspect deployment_manifest.json; the QC sample has n=4, f=1, quorum=3",
   "status": "OPERATOR_MEASURED"
  },
  {
   "assumptions": "the published sample is representative",
   "claim": "3-of-4 Ed25519 quorum certificates",
   "component": "PBFT COMMIT_QC",
   "environment": "cain-mr-02",
   "evidence": [
    "certificate_samples/qc_sample.json",
    "certificate_samples/membership.json",
    "offline_verifier/verify_qc.py",
    "offline_verifier/negative_fixtures.json"
   ],
   "falsifies": "a signature that fails Ed25519 verification or fewer than 3 unique valid signers",
   "id": "C2",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "the sample contains 3 valid COMMIT signatures (quorum 2f+1=3); the 4th replica did not sign this certificate; an offline verifier cannot check replay/revocation",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "python3 offline_verifier/verify_qc.py certificate_samples/qc_sample.json certificate_samples/membership.json",
   "status": "REPRODUCIBLE"
  },
  {
   "assumptions": "the recorded TLC runs are authentic",
   "claim": "Approximately 7.3 million model-checked states",
   "component": "TLA+ models CAINPBFTCommitSafety + CAINMCPGateAuthorization",
   "environment": "TLC",
   "evidence": [
    "formal_model_reconciliation.json",
    "https://github.com/.../clawx-site/evidence/formal-2026-09-27/"
   ],
   "falsifies": "per-run TLC output whose distinct-state sum differs materially",
   "id": "C3",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "the figure is the SUM OF DISTINCT STATES across 13 runs (7,642,008), not one model; bounded abstract models, no refinement proof to the code",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "run TLC with the published .tla/.cfg files (see formal_model_reconciliation.json)",
   "status": "OPERATOR_MEASURED"
  },
  {
   "assumptions": "n/a",
   "claim": "1,963 passing tests out of 1,978",
   "component": "test suite",
   "correction": "the reproducible count for the published regression suite is in test_count_reconciliation.json",
   "environment": "unspecified in the claim",
   "evidence": [
    "test_count_reconciliation.json"
   ],
   "falsifies": "n/a \u2014 status is NOT_ESTABLISHED",
   "id": "C4",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "raw report exists and reconciles exactly (1978=1963+7+8); operator host, not independent CI; source withheld",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "run test_count_reconciliation command",
   "status": "OPERATOR_MEASURED"
  },
  {
   "claim": "MCPGate enforcement rejects unauthorized tool calls before the effect",
   "component": "cain/mcp_proxy.py",
   "environment": "hosted/local",
   "evidence": [
    "enforcement_boundary.md",
    "https://github.com/.../artifacts/evolution13/"
   ],
   "falsifies": "a call that reaches the protected tool without a valid, quorum-backed authorization",
   "id": "C5",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "historical defect: a self-signed-token fast path granted ALLOW with zero validating signatures (fixed in commit 3ef3422, regression-tested)",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "run the E13 adversary suite and E9 boundary experiments",
   "status": "OPERATOR_MEASURED"
  },
  {
   "claim": "72-hour multi-region soak passed",
   "component": "soak",
   "environment": "cain-mr-01/cain-mr-02",
   "evidence": [
    "soak_results.json"
   ],
   "falsifies": "a completed 72h soak artifact meeting pre-committed criteria",
   "id": "C6",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "a 72h soak is RUNNING (~34.6h of 72h, 0 divergences); running is not a pass",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "n/a \u2014 the run failed by its own rule",
   "status": "NOT_ESTABLISHED"
  },
  {
   "claim": "Sub-15ms verification / ~2ms browser / ~2,269ms consensus / ~0.8263ms snapshot",
   "component": "performance",
   "environment": "various",
   "evidence": [
    "known_limitations.md"
   ],
   "falsifies": "a benchmark artifact with stated hardware/concurrency/sample counts",
   "id": "C7",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "the figures measure different boundaries (local signature verification vs network-inclusive consensus vs cached/snapshot authorization); no single reconciled benchmark artifact was located",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "see benchmark definitions in the referenced evidence (not reconciled here)",
   "status": "NOT_ESTABLISHED"
  },
  {
   "claim": "Independently audited / production-ready",
   "component": "platform",
   "environment": "n/a",
   "evidence": [
    "known_limitations.md"
   ],
   "falsifies": "a named auditor's published report",
   "id": "C8",
   "last_checked_utc": "2026-10-09T16:22:20Z",
   "limitations": "no third-party audit has been performed; not production-ready",
   "publisher": "CAIN-42 operator (internal)",
   "reproduce": "n/a",
   "status": "NOT_ESTABLISHED"
  }
 ],
 "schema": "cain42.review.claims_registry.v1",
 "status_definitions": {
  "DOCUMENTED": "described, but not demonstrated",
  "FAILED": "the specified test or criterion failed",
  "INDEPENDENTLY_AUDITED": "a named auditor examined a stated scope",
  "INDEPENDENTLY_REPRODUCED": "a named external party repeated it and published results",
  "NOT_ESTABLISHED": "required evidence is missing",
  "OPERATOR_MEASURED": "measured by CAIN's operator",
  "REPRODUCIBLE": "sufficient public materials exist for another party to repeat the relevant test",
  "SUPERSEDED": "replaced by a newer, linked result"
 }
}