CAIN-42 claim

C42-E38-ACTION-PROOF

every real governed action (kernel + E8 + E34 + E37) yields twelve signed layer proofs and one action proof binding identity, delegation, authority, policy, risk, evidence, authorization, the E8 commit, the enforcement boundary, execution, outcome and environment; a refused action yields none

Last reviewed 2026-10-01

TESTED

The claim

every real governed action (kernel + E8 + E34 + E37) yields twelve signed layer proofs and one action proof binding identity, delegation, authority, policy, risk, evidence, authorization, the E8 commit, the enforcement boundary, execution, outcome and environment; a refused action yields none

Level TESTED is how far the evidence goes: TESTED means a test suite exercised it, LIVE means it was observed on the hosted system. Nothing is claimed beyond its level.

Evidence files

• E38_PROOF_EXAMPLES/PROOF_CASES.json

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Limitations of this bundle

• In-process TESTED library on one host; the second trust domain and the eleven conformance counterparts are reference/mock implementations, not real vendors.
• CAIN-GIP v2 is a reference interchange layer carried in MCP/A2A/HTTP/... messages in-process; it is not an Internet, MCP or A2A standard and no live MCP/A2A server integration was tested.
• Zero-knowledge proofs are NOT IMPLEMENTED; selective disclosure is salted commitments + RFC 6962 inclusion.
• Hardware attestation is UNKNOWN (no TEE on this host); third-party verification is NOT AVAILABLE.
• Revocation propagation is measured in-process across subscriber domains; network propagation is NOT TESTED.
• Action proofs bind governance conditions and provenance; they do not show that an action was safe, correct or truthful.
• Claim graph: 10 of 64 public claims are fully linked; the rest are NOT FULLY VERIFIED, mostly because older bundles carry no source commitments or test results.
• Not hosted, no customers, not third-party reviewed.

From CAIN-42 Evolution 38 -- Portable Proof-Carrying Machine Agency.