CAIN-42 claim

C42-E37-ADMISSION

runtime admission verifies a measured code digest and probes; a runtime that only claims compliance is not admitted; hardware attestation stays UNKNOWN on this host

Last reviewed 2026-10-01

TESTED

The claim

runtime admission verifies a measured code digest and probes; a runtime that only claims compliance is not admitted; hardware attestation stays UNKNOWN on this host

Level TESTED is how far the evidence goes: TESTED means a test suite exercised it, LIVE means it was observed on the hosted system. Nothing is claimed beyond its level.

Evidence files

• E37_RUNTIME_PASSPORTS.json

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Limitations of this bundle

• In-process TESTED library: the mesh, its nodes, regions and clouds are governance records in one process on one VPS; there is no multi-cloud or multi-node deployment of E37.
• Only this host is measured (environment passport); declared destinations are not measured.
• Hardware attestation is UNKNOWN: no TEE on this host; the admission attestation probe has nothing to call.
• Adapters were tested against a reference in-process harness; no live MCP/A2A/HTTP/gRPC server integration.
• Federated cloud targets (AWS/Azure/GCP/private/bare metal/edge/hybrid) are ARCHITECTURE only.
• The governance quorum is in-process (3f+1 keys, no network); it is not the networked PBFT cluster.
• Event-log tail truncation is detectable only against a signed checkpoint.
• Executions run on the E33 reference executors; their effects are in-process, not in an external system.
• Scale numbers are single-host, in-process; 1M virtual executions exercise the fence+fingerprint fast path only (SIMULATION).
• Competitor capabilities were not assessed; research radar items are unimplemented proposals.
• Not hosted, no customers, not third-party reviewed.

From CAIN-42 Evolution 37 -- Autonomous Execution Mesh.