{
  "bundle_id": "cain39-agent-internet-fabric-public-evidence",
  "bundle_version": "1.0.0",
  "generated_at": "2026-09-18T02:10:00Z",
  "title": "CAIN 39.0 Trust-Native Agent Internet -- Public Evidence Bundle",
  "purpose": "Two real, live things: (1) a delegation-token signature-verification fix closing a gap CAIN 38 found but did not fix -- demonstrated live on the real 4-node PBFT cluster (quorum_certificate_status VALID, sequence 9); (2) a real 7-step conditional-settlement/escrow lifecycle (PROPOSED->...->SETTLED), independently verifiable at TWO separate layers: cryptographic chain integrity (CAIN 37's verifier, reused unmodified) and business-rule state-machine legality (this bundle's own replay()).",
  "how_to_verify_independently": "See HOW_TO_VERIFY.md for copy-pasteable commands, including a negative control showing the two verification layers catch DIFFERENT attack classes (crypto tamper vs. illegal state-skip).",
  "honest_scope_note": "This is ONE escrow lifecycle and ONE signed-delegation live demo, not a production transaction stream. Settlement is SIMULATED (SimulatedPaymentAdapter) -- no real money moved. See CAIN_39_LIMITATIONS.md for the full 50-phase scope accounting (most phases NOT ATTEMPTED this session).",
  "artifacts": [
    {"filename": "cain_37_independent_verifier.py", "sha256": "0b3e74e6227ca1de8046beccb879362ff06817cfd1fb0e74b16dc3af8c8c9512", "description": "Reused unmodified across CAIN 37/38/39 -- zero-import, never imports CAIN production code."},
    {"filename": "cain_escrow_39.py", "sha256": "6604ccc7fb89c4c6554baca83f7edde2e885f61915adb59b0c2fbf2939655e17", "description": "The escrow state machine + business-rule replay() -- download and run it yourself, it has no CAIN-server dependency."},
    {"filename": "cain39_escrow_chain.jsonl", "sha256": "17b017d7970bc3b821ef2b91466604010b39b436f7459725d33bae5c0e3594c8", "description": "7 real evidence objects, one real escrow lifecycle, PROPOSED through SETTLED.", "classification": "LIVE-VERIFIED (demo)"},
    {"filename": "cain39_escrow_checkpoints.jsonl", "sha256": "db174cb8ee6327b4ecca5514036340a5738250751287e7ab46bffb3b457c2db7", "description": "Merkle checkpoint over all 7 transitions."}
  ],
  "related_finding_not_in_this_bundle_as_a_file": {
    "description": "The delegation-signature live demo (token.verify_signature() -> SIGNATURE_VALID, then a real PBFT commit at sequence 9, quorum_certificate_status VALID) was run this session but its raw result was not separately published as a bundle artifact -- see CAIN_39_CLAIM_MATRIX.json CLAIM-39-001 for the exact reproduction steps instead."
  }
}