CAIN-42 evidence library

CAIN-42 Evolution 25 -- Universal Machine Agency Fabric

Evidence bundle for evolution E25: 0 claims, 501 of 501 invariants held.

Last reviewed 2026-10-01

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Invariants: 501 of 501 held

Rules the code must never break, each checked across many scenarios. See all 501 on one page.

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Known limitations

• {"limitation": "In-process governance library. Protocol adapters normalize REFERENCE messages; no third-party agent, MCP server or A2A peer has been governed.", "status": "SCOPE"}
• {"limitation": "The 100,000-agent / 1,000,000-transaction run is a deterministic single-process MODEL; it does not recompute signatures per transaction.", "status": "SCOPE"}
• {"limitation": "Anomaly/behavioral recall against real adversaries is unmeasured.", "status": "UNKNOWN"}
• {"limitation": "Hardware attestation is not available in this environment; the fabric records software/configuration/workload evidence only.", "status": "UNKNOWN"}
• {"limitation": "The evidence bundle is signed with an ephemeral build key, not a production trust root.", "status": "EPHEMERAL"}
• {"limitation": "No third-party security review has been performed.", "status": "NOT REVIEWED"}
• {"limitation": "OAuth/OIDC/AuthZEN/COAZ/RAR/DPoP/VC/DID are mapped in the standards inventory; only JWT, X.509 and SPIFFE-ID are implemented.", "status": "MAPPED"}

The bundle's own README

CAIN-42 Evolution 25 -- Universal Machine Agency Fabric#

Evidence measured at build time from the real E25 fabric and the real E8 kernel. Start with CAIN42_E25_EVIDENCE_BUNDLE.json; one full run is published in AGENCY_RUN_MANIFEST.json; verify with verify_e25.py.txt (see REPRODUCTION.md). Status: TESTED library, pre-production, not hosted, not third-party reviewed.