# CAIN-42 Known Limitations (reviewer-facing)

1. **No independent third-party audit.** All evidence is operator-generated (same repository/operator).
2. **No real TEE / hardware attestation on the development host.** Hardware-backed attestation is BLOCKED.
3. **Operator independence is not established.** All replicas/witnesses are under one operator; distinct keys/processes
   are not independent organizations.
4. **72-hour soak not established.** Two recorded 72h soak claims FAILED by their own rules; no completed 72h artifact.
5. **The 1,963/1,978 test figure is NOT_ESTABLISHED** — no artifact was found; the reproducible suite count is published.
6. **The ~7.3M figure is a SUM of distinct states across 13 bounded TLC runs (7,642,008)**, not one model and not a
   refinement proof about the code.
7. **Consensus ≠ infrastructure independence.** Signatures prove signatures; they do not prove geographic or
   administrative separation.
8. **Kernel/host compromise is outside enforcement coverage.**
9. **Performance figures measure different boundaries** and are not reconciled into one latency claim.
10. **Historical defect** (ALLOW with zero validating signatures) is fixed (commit 3ef3422) and regression-tested, but is
    disclosed here rather than hidden.