{
  "bundle_id": "cain38-agentic-trust-economy-public-evidence",
  "bundle_version": "1.0.0",
  "generated_at": "2026-09-18T00:50:00Z",
  "title": "CAIN 38.0 Agentic Trust Economy Fabric -- Public Evidence Bundle",
  "purpose": "One real, live-verified economic authorization decision (IDENTITY -> DELEGATION -> POLICY -> RISK -> BUDGET -> AUTHORIZATION -> CONSENSUS -> EXECUTION -> OUTCOME), where CONSENSUS is a genuine PBFT quorum certificate from CAIN's real 4-node cluster (4/4 signers, VALID), and EXECUTION is explicitly SIMULATED (no real payment moved) -- plus the two real bugs this session found and fixed in the pre-existing delegation and budget engines that this pipeline depends on.",
  "how_to_verify_independently": "Download cain_37_independent_verifier.py (unmodified from CAIN 37 -- reused as-is, no CAIN-38-specific verifier was needed because the evidence schema is shared) and cain38_economic_evidence_chain.jsonl / cain38_economic_evidence_checkpoints.jsonl. Run: python3 cain_37_independent_verifier.py verify-chain cain38_economic_evidence_chain.jsonl (expect VALID). Then verify-checkpoint the same way. Then inspect the single evidence object's 'proof.pipeline' field, which contains the full 10-stage decision trace including the real CONSENSUS stage's quorum_certificate_status: VALID and quorum_certificate_accepted_signers: 4.",
  "honest_scope_note": "This is ONE real decision, not a live transaction stream, marketplace, or payment integration. amount_cents=2500 ($25.00) was authorized and 'settled' only against SimulatedPaymentAdapter -- no money moved. The delegation-spend-cap and budget-idempotency bugs described in CAIN_38_SECURITY_RED_TEAM.json were found in PRE-EXISTING code this pipeline depends on (cain_intent_action_fabric.py, cain_budget.py), not in code invented to make this demo pass. See CAIN_38_LIMITATIONS.md for the full 42-phase scope accounting.",
  "artifacts": [
    {"filename": "cain_37_independent_verifier.py", "sha256": "0b3e74e6227ca1de8046beccb879362ff06817cfd1fb0e74b16dc3af8c8c9512", "description": "Reused unmodified from CAIN 37 -- zero-import, never imports CAIN production code."},
    {"filename": "cain38_economic_evidence_chain.jsonl", "sha256": "2de71ba298563932a72a4c727da03b8b163e319939242533fa9aba5607277257", "description": "1 real EconomicActionEngine decision, ALLOW, with a real live PBFT quorum certificate as its CONSENSUS stage.", "classification": "LIVE-VERIFIED"},
    {"filename": "cain38_economic_evidence_checkpoints.jsonl", "sha256": "c739947092a41c80821a3c11402a24939da73ea35e297220db4197c6bdd045b4", "description": "Merkle checkpoint over the single evidence object."},
    {"filename": "CAIN_38_SECURITY_RED_TEAM.json", "sha256": "30cfc1c1ffe609f93465b934673d00c71a831abe30aa3b28efb3aa882665365a", "description": "9 economic attack scenarios tested; 2 real live bugs found and fixed in pre-existing code."},
    {"filename": "CAIN_38_ECONOMIC_ACTION_SPEC.json", "sha256": "58bf65b074bfd7cd1782ee2d302bc0fbb48881bb36f777748113b99c0d2bf52f", "description": "Full pipeline stage spec and explicit non-goals (not a payment processor, not autonomous trading)."},
    {"filename": "CAIN_38_DELEGATION_SPEC.json", "sha256": "ba2856668256a7955b27e476bad9acb9485f9527b23333fd0c64afb1d26b6679", "description": "Delegation chain semantics, including an honestly-documented unresolved gap: delegation tokens are not currently signature-verified."},
    {"filename": "CAIN_38_CAPABILITY_SPEC.json", "sha256": "c9891b28158f5f06acb6be4aa04ffb8707801516cae9ce4b30f0b1947ba00d58", "description": "Capability token field-by-field coverage against the mission's Phase 5 requirements, including gaps (no execution-count limit, no revocation registry for this token class)."}
  ]
}