{
  "by_top_level_area": {
    ".venv-evolution14": {
      "files": 14,
      "shell_true_files": 1,
      "test_files": 0
    },
    "artifacts": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "auditor-kit": {
      "files": 5,
      "shell_true_files": 0,
      "test_files": 0
    },
    "cain": {
      "files": 51,
      "shell_true_files": 3,
      "test_files": 1
    },
    "cain-microservices": {
      "files": 6,
      "shell_true_files": 1,
      "test_files": 3
    },
    "cain-sandbox": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "cain45": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "cainstudio-homepage": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "clawx": {
      "files": 3,
      "shell_true_files": 0,
      "test_files": 0
    },
    "clawx-site": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "cli": {
      "files": 1,
      "shell_true_files": 1,
      "test_files": 0
    },
    "deploy": {
      "files": 4,
      "shell_true_files": 0,
      "test_files": 0
    },
    "docs": {
      "files": 4,
      "shell_true_files": 0,
      "test_files": 0
    },
    "examples": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "ihvrk": {
      "files": 4,
      "shell_true_files": 0,
      "test_files": 2
    },
    "multi-agent-failure-tracer": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "platform-gateway": {
      "files": 46,
      "shell_true_files": 2,
      "test_files": 10
    },
    "private": {
      "files": 13,
      "shell_true_files": 0,
      "test_files": 0
    },
    "public-verifiers": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "quarantine": {
      "files": 8,
      "shell_true_files": 1,
      "test_files": 2
    },
    "review-attachment": {
      "files": 1,
      "shell_true_files": 0,
      "test_files": 0
    },
    "scripts": {
      "files": 334,
      "shell_true_files": 18,
      "test_files": 1
    },
    "sdk": {
      "files": 3,
      "shell_true_files": 0,
      "test_files": 2
    },
    "talos-coder": {
      "files": 2,
      "shell_true_files": 1,
      "test_files": 0
    },
    "taloscode-security": {
      "files": 1,
      "shell_true_files": 1,
      "test_files": 0
    },
    "tests": {
      "files": 164,
      "shell_true_files": 0,
      "test_files": 164
    },
    "tools": {
      "files": 16,
      "shell_true_files": 0,
      "test_files": 0
    },
    "verification": {
      "files": 4,
      "shell_true_files": 0,
      "test_files": 2
    }
  },
  "caller_search_directories": [
    "cain",
    "platform-gateway",
    "talos-coder",
    "shared_lib",
    "billing-service",
    "cain45"
  ],
  "declared_protected_paths": {
    "adapters": [
      "TalosGovernedCommandRunner",
      "TalosGovernedPythonRunner",
      "TalosGovernedFilesystem",
      "TalosWorkerBoundary"
    ],
    "expected": [
      "cain/talos/talos_sandbox_launcher.py",
      "cain/talos/talos_worker.py"
    ],
    "package": "cain/talos",
    "process_start_sites": [
      "cain/talos/talos_sandbox_launcher.py",
      "cain/talos/talos_worker.py"
    ]
  },
  "known_ungoverned_paths": [
    {
      "classification": "OUTSIDE_PROTECTED_BOUNDARY",
      "path": "talos-coder/daemon/tools/run_command.py",
      "why": "subprocess.run(cmd, shell=True); does not call any TALOS adapter. The Evolution 5/6 reports called this path closed; it is not."
    },
    {
      "classification": "OUTSIDE_PROTECTED_BOUNDARY (separate boundary, separate evidence)",
      "path": "cain/mcp_proxy.py (stdio tool servers)",
      "why": "governed by MCPGate's own capability tokens and optional Landlock/seccomp (Sovereign Evolutions 1-3), not by cain.talos"
    },
    {
      "classification": "OUTSIDE_PROTECTED_BOUNDARY",
      "path": "platform-gateway/* request handlers and in-process tool bodies",
      "why": "run inside the gateway process; nothing in the gateway imports cain.talos"
    }
  ],
  "non_test_files_using_a_shell": [
    ".venv-evolution14/lib/python3.14/site-packages/pip/_internal/commands/configuration.py",
    "cain-microservices/shadow-agent-scanner/owasp_scanner.py",
    "cain/frontier/cluster.py",
    "cain/frontier/discovery.py",
    "cain/govbpf/attacks.py",
    "cli/cain_gate.py",
    "platform-gateway/cain_frontier_fabric.py",
    "platform-gateway/cain_governance_conformance.py",
    "quarantine/epoch13_concurrent_session_unverified/scripts/build_epoch13_artifacts.py",
    "scripts/architecture_reality_map.py",
    "scripts/build_cluster_bundle.py",
    "scripts/build_frontier_bundle.py",
    "scripts/build_hardening_bundle.py",
    "scripts/cain42_bft/deploy_multi_region.py",
    "scripts/cain42_bft/pbft_ab_bench.py",
    "scripts/cain42_bft/pbft_dag_cluster_run.py",
    "scripts/cain42_bft/pbft_proof_package_run.py",
    "scripts/cain42_bft/pbft_soak.py",
    "scripts/cain42_bft/reproducible_build_check.py",
    "scripts/cain42_bft/soak72.py",
    "scripts/cain42_reality_map_2026.py",
    "scripts/cluster5/forensic_baseline.py",
    "scripts/fabric_daily_sync.py",
    "scripts/frontier_run.py",
    "scripts/reality_map_2026.py",
    "scripts/run_forensic_stress_campaign.py",
    "scripts/sovereign/evidence_pipeline_e7.py",
    "talos-coder/daemon/tools/run_command.py",
    "taloscode-security/engine.py"
  ],
  "production_callers_of_cain_talos": [],
  "python_files_that_can_start_a_process": 692,
  "schema": "cain42.sovereign.evo07.enforcement_inventory.v1"
}