CAIN-42 evidence library

acp-evolution03-state-2026-10-05 -- CAIN ACP Evolution 03: quorum-certified governance state root

Evidence bundle: 0 claims, 0 of 0 invariants held.

Last reviewed 2026-10-04

The bundle's own README

acp-evolution03-state-2026-10-05 -- CAIN ACP Evolution 03: quorum-certified governance state root#

What this shows (IMPLEMENTATION-TESTED: real ACP ledger + production PBFT engine code, one process, one host, in-process network; NOT deployed to the live clusters; no third-party review):

• every replica receipt commits to an RFC 6962 Merkle root over the full governance state; >= quorum

matching receipts certify it; f Byzantine signers cannot certify a forged root (N=4, 5, 7);

• agents whose observed effect or own report contradicts their authorization are contained on every

replica at the same sequence number, until a quorum release and a fresh trust attestation;

• governed memory never changes an authorization verdict.

Verify offline (needs only Python 3 + cryptography; imports no CAIN code):

python3 verify_state_root.py E03_STATE_BUNDLE.json # expect "verdict": "VERIFIED"

Then tamper with any receipt, snapshot value, dimension proof or evidence-log entry and run it again. Bounded TLA+ model and TLC output: StateCertification.* / TLC_*.txt. Full report with limitations, findings (incl. a critical fix to the earlier govkernel E03S layer) and IP/reproduction notes: E03_STATE_FABRIC_REPORT.md. Implementation source is not published; SOURCE_COMMITMENTS.json pins it.