{
  "claims": [
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "TALOS verifies the envelope signature against its own trust roots before reading any other state",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-01",
        "F7-18"
      ],
      "id": "C01",
      "limitations": "Ed25519 via the 'cryptography' package is assumed sound; key custody is outside this code.",
      "source_file": "cain/talos/talos_kernel.py",
      "status": "PASS",
      "tests": [
        "E7-A-001",
        "E7-A-002",
        "E7-A-003",
        "E7-A-004",
        "E7-A-023",
        "E7-A-050"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "An envelope authorises exactly one request: the argv / code / path / content / cwd / env it was signed for",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-07"
      ],
      "id": "C02",
      "limitations": "The executable named by argv[0] is resolved through a fixed PATH inside the sandbox at exec time; the file it resolves to is not hashed.",
      "source_file": "cain/talos/cain_talos_protocol.py",
      "status": "PASS",
      "tests": [
        "E7-E-010",
        "E7-E-011",
        "E7-E-012",
        "E7-E-015",
        "E7-E-041",
        "E7-A-095"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "Every refusal path leaves the protected action un-executed (canary observed absent)",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-11",
        "F7-14"
      ],
      "id": "C03",
      "limitations": "Shown for the paths listed; see ENFORCEMENT_COVERAGE.md for paths outside.",
      "source_file": "cain/talos/talos_kernel.py",
      "status": "PASS",
      "tests": [
        "E7-E-001",
        "E7-E-002",
        "E7-E-003",
        "E7-E-020",
        "E7-E-021",
        "E7-E-022",
        "E7-E-030",
        "E7-E-031",
        "E7-E-032"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "A single authorization is consumed at most once across threads and processes sharing one ledger file on one host",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-10",
        "F7-19"
      ],
      "id": "C04",
      "limitations": "Single host, single SQLite file. No multi-host guarantee.",
      "source_file": "cain/talos/talos_ledger.py",
      "status": "PASS",
      "tests": [
        "E7-L-001",
        "E7-L-002",
        "E7-L-003",
        "E7-A-060"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "Crashes, ledger loss and ledger replacement do not yield a second execution",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-16",
        "F7-20",
        "F7-22"
      ],
      "id": "C05",
      "limitations": "Restoring an OLDER COPY of the same ledger is not detected; the operator must raise the invalidation floor (E7-L-023).",
      "source_file": "cain/talos/talos_ledger.py",
      "status": "PASS",
      "tests": [
        "E7-L-010",
        "E7-L-011",
        "E7-L-012",
        "E7-L-013",
        "E7-L-022",
        "E7-L-025"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "The request is delivered to the worker only after the launcher reports every required control as measured",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-14"
      ],
      "id": "C06",
      "limitations": "A control being measured is not the same as it being sufficient against every attack.",
      "source_file": "cain/talos/talos_worker.py",
      "status": "PASS",
      "tests": [
        "E7-E-034",
        "E7-E-035",
        "E7-E-036",
        "E7-E-039"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "Inside the worker: no file access outside the signed scope, no sockets, no capabilities, no view of host processes",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [],
      "id": "C07",
      "limitations": "Observed on this host only (Linux 7.0, Landlock ABI 8, x86_64, root). Kernel exploits, side channels and anything reachable through an allowed syscall are not addressed. Not a mount namespace; no cgroup limits.",
      "source_file": "cain/talos/talos_sandbox_launcher.py",
      "status": "PASS",
      "tests": [
        "E7-W-001",
        "E7-W-002",
        "E7-W-003",
        "E7-W-005",
        "E7-W-010",
        "E7-W-011",
        "E7-W-012",
        "E7-W-013",
        "E7-W-020",
        "E7-W-021"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "No process started by a request survives the call, including when the gateway dies",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [],
      "id": "C08",
      "limitations": "Relies on PID-namespace teardown.",
      "source_file": "cain/talos/talos_sandbox_launcher.py",
      "status": "PASS",
      "tests": [
        "E7-W-041",
        "E7-W-042",
        "E7-W-047"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "Human approval is a signature by an approver key TALOS trusts, over the exact operation",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-09"
      ],
      "id": "C09",
      "limitations": "Who holds the approver key, and how a human is shown what they approve, is outside this code.",
      "source_file": "cain/talos/talos_kernel.py",
      "status": "PASS",
      "tests": [
        "E7-A-070",
        "E7-A-071",
        "E7-A-072",
        "E7-E-024",
        "E7-A-092"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    },
    {
      "artifacts": [
        "test_results.json",
        "formal_results.json",
        "environment.json"
      ],
      "claim": "The formal model of the decision procedure matches the implementation's checks and their order",
      "environment": "local build host; see environment.json",
      "evidence_class": "local test + local model",
      "formal_properties": [
        "F7-13"
      ],
      "id": "C10",
      "limitations": "Agreement is tested on 34 single and ~115 seeded multi-failure states, not proven.",
      "source_file": "verification/sovereign/e7_cain_talos_z3.py",
      "status": "PASS",
      "tests": [
        "E7-F-LINK-001",
        "E7-F-LINK-002",
        "E7-F-LINK-003",
        "E7-F-LINK-004",
        "E7-F-000"
      ],
      "tests_failed": [],
      "tests_missing": [],
      "verification_command": "python3 -m pytest -q -o addopts= tests/sovereign/evolution_07 -k <test>"
    }
  ],
  "note": "Every claim here is a LOCAL result. None is a statement about production.",
  "schema": "cain42.sovereign.evo07.claim_evidence_matrix.v1"
}