{
  "manifest_schema": "cain42.sovereign.extension_containment.evidence_manifest.v1",
  "project": "PROJECT SOVEREIGN",
  "component": "CAIN-42 Sovereign Extension Containment and Local Enforcement",
  "generated_at_utc": "2026-10-12T06:26:00Z",
  "environment": {
    "os": "Linux Ubuntu 26.04.1 LTS (x86_64)",
    "kernel": "7.0.0-38-generic #38-Ubuntu SMP PREEMPT_DYNAMIC",
    "python": "3.14.4",
    "bubblewrap": "0.11.1",
    "clang": "18.1.3",
    "bpftool": "7.7.0+7.0.0-38.38",
    "wasmedge": "0.0.0-unreleased (wasi_logging 0.1.0.0)",
    "cryptography": "46.0.5",
    "cgroup2_path": "/sys/fs/cgroup",
    "bpf_fs_path": "/sys/fs/bpf",
    "kernel_btf": "/sys/kernel/btf/vmlinux"
  },
  "release_gates": {
    "GATE_1_ISOLATION": {
      "status": "PASS",
      "verification": "Bubblewrap user namespaces, UID/GID 65534 mapping, no-new-privs, and Seccomp-BPF blocking 17 dangerous syscalls.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate1_sandbox_escape_privilege_escalation"
    },
    "GATE_2_NETWORK_DENIAL": {
      "status": "PASS",
      "verification": "Dual-boundary network denial: unshared container net namespace and kernel eBPF cgroup_skb/egress packet drop returning EPERM.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate2_network_denial_at_os_and_kernel_boundaries"
    },
    "GATE_3_PROTECTED_FILE_DENIAL": {
      "status": "PASS",
      "verification": "Read-only root mount (--remount-ro /) denying writes with EROFS and preventing access to /etc/shadow and /root.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate3_protected_file_denial"
    },
    "GATE_4_RESOURCE_ENFORCEMENT": {
      "status": "PASS",
      "verification": "Memory ceilings (cgroup memory.max + RLIMIT_AS), PID ceilings (pids.max), IO byte boundaries, and process tree SIGKILL reaping.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate4_resource_ceilings_and_process_cleanup"
    },
    "GATE_5_SIGNED_POLICY_INTEGRITY": {
      "status": "PASS",
      "verification": "Ed25519 canonical signature verification (RFC 8785) and strict monotonic version anti-rollback checks.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate5_signed_policy_integrity_and_anti_rollback"
    },
    "GATE_6_BOUNDED_OFFLINE_OPERATION": {
      "status": "PASS",
      "verification": "Hard expiration window enforcement and max_offline_hours halt (EXPIRED_HALT) blocking unadmitted extension execution.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate6_offline_operation_and_revocation"
    },
    "GATE_7_DURABLE_AUDIT_EVIDENCE": {
      "status": "PASS",
      "verification": "SQLite WAL append-only ledger with unbroken SHA-256 hash chaining, Ed25519 signed checkpoints, and restart recovery.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate7_durable_audit_hash_chain_and_tamper_detection"
    },
    "GATE_8_FAIL_CLOSED_ZERO_FALLBACK": {
      "status": "PASS",
      "verification": "Missing sandbox primitives, invalid manifests, or missing entrypoints fail closed without raw execution fallback.",
      "test_reference": "tests/test_sovereign_extension_adversarial.py::test_gate8_fail_closed_zero_unsandboxed_fallback"
    }
  },
  "test_execution_summary": {
    "total_tests": 37,
    "passed": 37,
    "failed": 0,
    "skipped": 0,
    "duration_sec": 4.20,
    "suites": [
      {
        "suite": "tests/test_cain_extension_hypervisor.py",
        "passed": 11,
        "failed": 0
      },
      {
        "suite": "tests/test_cain_plugin_sentinel.py",
        "passed": 7,
        "failed": 0
      },
      {
        "suite": "tests/test_sovereign_sync_daemon.py",
        "passed": 11,
        "failed": 0
      },
      {
        "suite": "tests/test_sovereign_extension_adversarial.py",
        "passed": 8,
        "failed": 0
      }
    ]
  },
  "verified_artifacts": {
    "cain/cain_extension_hypervisor.py": "7fe171a3dfa3ee58e4f6c77fab94c2ec178122c4eb3471f33a7d31ecf4fcedb1",
    "cain/bpf/cain_plugin_sentinel.bpf.c": "25ac9cf67eef28aea91895047d9b392be350d89085337496874251b9937ad7aa",
    "cain/bpf/cain_plugin_sentinel.bpf.o": "c71707188db3b08a8c6fb35b26e1b304529b12f35afcfcbd9157095d827ac1a2",
    "cain/cain_plugin_sentinel.py": "bcc002d5a865aeb1cec47b85364816d60cbc56374f312d0c922f0fae737d28c6",
    "cain/sovereign_sync_daemon.py": "653edb4fa5901cd3f099ea7caafe7e0056c1897b83294930d15af2a3c5343bea",
    "deploy/systemd/cain-plugin-sentinel.service": "efc0b09bfbfaeaf710394f9f0cf1cbcf85efb0f7d430a48bb5836d4ff92dd15a",
    "deploy/systemd/cain-sovereign-sync.service": "d7c4a48fce21f595265a12b73fe7307e95052b3d25e361fef2acb675f066a0af",
    "deploy/k8s/cain-containment-pod.yaml": "6cc23b948305945f09a40867a00d95296be6f8c16e7e95f3cea8d82917abe0bc",
    "tests/test_cain_extension_hypervisor.py": "861d66cae893b73bf5c2ac9ee450c451ee36fdc6f239f46eb9c10d32e7ef682d",
    "tests/test_cain_plugin_sentinel.py": "94bf6c2965bdc4cf177132a3605504711af3cb494fdcb6ce034b3a15f7e56956",
    "tests/test_sovereign_sync_daemon.py": "c96562d4114cde7e60ed01c3fb6dce280473a07b872899d12a000c44aefbff37",
    "tests/test_sovereign_extension_adversarial.py": "f8a214a09d5416c7a288763d90f80f601c4d05e04aa963bae9e6a9f4b5b2fb0b"
  },
  "overall_verdict": "PASS"
}