{ "approver": { "human_id": "operator-approver", "note": "generated for this run; an operator approval", "public_key_b64": "zYCAn4mPl8E0AUv5dGFMihMRpVGDIeqRC2WhZUArFvI=" }, "attacks": [ { "attack": "authorize on a REQUIRE_APPROVAL decision without a human approval", "detail": "authorize: CAIN verdict is REQUIRE_APPROVAL; a signed human approval is required", "result": "PASS" }, { "attack": "use instance-001's grant inside instance-002's ZoD", "detail": "CALL_MCP_TOOL: grant belongs to another ZoD (grants are not transferable)", "result": "PASS" }, { "attack": "grant a capability outside the ZoD's set", "detail": "grant: SECRET_ACCESS is not in this ZoD's capability set", "result": "PASS" }, { "attack": "call a tool outside the ZoD's tool set", "detail": "CALL_MCP_TOOL: grant covers tool:kv.get, not tool:kv.put", "result": "PASS" }, { "attack": "forged grant (capability rewritten after signing)", "detail": "EXECUTE_CODE: grant signature invalid or not issued by this hypervisor", "result": "PASS" }, { "attack": "act without presenting the security context", "detail": "CALL_MCP_TOOL: no security context presented (mandatory for every consequential action)", "result": "PASS" }, { "attack": "child ZoD asking for more than its parent", "detail": "spawn: capabilities not held by parent: ['SECRET_ACCESS']; resource limits exceed the parent's", "result": "PASS" }, { "attack": "use a terminated ZoD's grant", "detail": "CALL_MCP_TOOL: ZoD is TERMINATED; only RUNNING ZoDs may act", "result": "PASS" }, { "attack": "security-context substitution (model swapped mid-run)", "detail": "CALL_MCP_TOOL: security context changed since authorization", "result": "PASS" }, { "attack": "revalidate with the substituted context", "detail": "revalidate: security context changed since authorization", "result": "PASS" } ], "cluster_sequences": { "cain_decision": 13377, "zod_1_authorization": 13379, "zod_2_authorization": 13380 }, "confined_probe": { "egress": "Network is unreachable", "host_repo_visible": false, "pid": 2, "uid": 65534, "write_usr": "Read-only file system" }, "evidence_chain_intact": true, "evidence_entries": 45, "hypervisor_public_key_b64": "FD9SrHuHFkte8kW/BAUbBaP+bKqRoElTX5WTYSdGlng=", "not_established_in_evolution_1": [ "seccomp syscall filtering", "allowlisted egress (only deny-all)", "hardware-backed attestation (software measurement only)", "hypervisor deployed as a service in front of customer agents (this is a library run on the gateway host)" ], "run_at": "2026-09-27T22:48:12Z", "schema": "CAIN45/ZOD-LIVE-RUN/v1", "state_after_bad_revalidation": "QUARANTINED", "state_after_context_substitution": "SUSPENDED", "tool_call": { "response": { "id": "116290eb", "jsonrpc": "2.0", "result": { "value": "hello" } }, "server": "sandbox key-value tool server (in-process)", "tool": "kv.get" }, "what_this_is": "One CAIN-45 ZoD (and a second, terminated one) authorized by the LIVE CAIN-42 PBFT cluster cain-mr-01 on top of a real production CAIN decision, run inside real confinement, attacked, suspended, quarantined and terminated. Operator-run on the gateway host.", "zods": [ { "agent_id": "finance-reconciliation-agent", "attestation_digest": "df45f677461538c6c28dd3ac7340d992d615cdd531d113adbc66aa5a7aa7fa97", "authorization_id": "zauth_3b0b4c0f4ca3fe40a7c67eb4", "consensus_certificate": { "agent_id": "finance-reconciliation-agent", "attestation_digest": "df45f677461538c6c28dd3ac7340d992d615cdd531d113adbc66aa5a7aa7fa97", "capability_hash": "0c32272a2f4564bb1dbe36d53494737915235216e212199c99bd92008a0857c3", "certificate_digest": "3b0b4c0f4ca3fe40a7c67eb49cf021ca00698f73b45876ac986309ce366d499d", "consensus": { "certificate_hash": "53ebe4d940b36ae9fb1c30003a7cb675a05a2f9ef9f12f96b79c709e40ecacb3", "client_id": "cain45-hypervisor", "cluster_id": "cain-mr-01", "operation": { "action": "zod_authorization", "data": { "certificate_digest": "3b0b4c0f4ca3fe40a7c67eb49cf021ca00698f73b45876ac986309ce366d499d", "domain": "CAIN45/ZOD-AUTHORIZATION-ORDER/v1", "zod_id": "zod_e2dc6bbbbd1be05d" }, "resource": "zod/zod_e2dc6bbbbd1be05d" }, "quorum": 3, "request_id": "zod-zod_e2dc6bbbbd1be05d-3b0b4c0f4ca3fe40", "sequence": 13379, "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-3" ], "view": 51 }, "context_hash": "6af310dfceb06533b6e648401c28d16582a746050daa9f62cdfe6df98c05245d", "decision": { "certificate_hash": "357af2dc353fe01baafc872a24913597da2fa2877301761c9f77a176e6687bd8", "decision_id": "fd_fbd4d17efc714c1f8b7b6dec", "pre_verdict": "REQUIRE_APPROVAL", "sequence": 13377 }, "expires_at": 1790549883.124478, "human_approval": { "human_id": "operator-approver", "signature_b64": "FboLs0nv7s9O1tYXp10E90hndZwTtFZJ3eUMgutcZyXeUy3W91cPFT8/Ex86ptLkFnOfFtWUXRB2qYp5fLK+Bg==" }, "instance_id": "finance-reconciliation-agent-instance-001", "issuer_public_key_b64": "FD9SrHuHFkte8kW/BAUbBaP+bKqRoElTX5WTYSdGlng=", "mcp_capability_hash": "c0b7e0275d027788ed9ba35d77a379508ef71de0be331ea2183f78eb14d2fd4f", "network_policy_hash": "79234252c41c68841d64e022bf76921e2903878f57e3f467aee4c3d9bb403c68", "not_before": 1790549283.124478, "parent_zod": null, "policy_hash": "484729ee2da57d3e8fe94a2b7c10f5282f6e2d1e411bddd1dc6d0449380881f0", "resource_policy_hash": "f8f567e3656082e78bf02c91158b3a5a0606cab261070dedf9bffc0806112b12", "risk_state_hash": "e2767d6c542c756e5ae2c53d75e1a562f533ca4f2e53f05da0f478632ad0a582", "signature_b64": "B1PxfD/3VY1c5RbNanXoFb2UNQjwa/QGGLeckQP+DwwIvMSKw35TRT7u6zWy6LunVbjgfHFDJFnJa2DroTbgBA==", "spec_hash": "3ce0e8a37784abe7850a8f5436b72fd439429f715b8c45f1336e6f66df5d05b6", "tenant_id": "cus_cain45_demo", "trajectory_id": "traj-37b577dd", "trust_state_hash": "0f6f3f895b062d7b1936ce63489c05515012f68a9fbbfabcdf5cc1f96f855197", "zod_id": "zod_e2dc6bbbbd1be05d" }, "context_hash": "6af310dfceb06533b6e648401c28d16582a746050daa9f62cdfe6df98c05245d", "created_at": 1790549283.124478, "evidence_root": "54888cb9dd103370f9bd610df5ff4a9d0daacd765882280917c76fe80d70add3", "expires_at": 1790549883.124478, "instance_id": "finance-reconciliation-agent-instance-001", "parent_zod": null, "policy_hash": "484729ee2da57d3e8fe94a2b7c10f5282f6e2d1e411bddd1dc6d0449380881f0", "risk_state_hash": "e2767d6c542c756e5ae2c53d75e1a562f533ca4f2e53f05da0f478632ad0a582", "spec": { "capabilities": [ "CALL_MCP_TOOL", "EXECUTE_CODE" ], "delegation_allowed": true, "limits": { "cpu_quota_pct": 50, "max_pids": 16, "memory_bytes": 134217728, "tmpfs_bytes": 67108864, "wall_seconds": 20 }, "network": { "egress": [] }, "resources": [ "code:reconcile", "tool:kv.get" ], "tools": [ "kv.get" ], "ttl_seconds": 600 }, "state": "TERMINATED", "tenant_id": "cus_cain45_demo", "trajectory_head": "b7c8cc6627e8dd53058a67b52cbde7fc4111259efdfc44334ca04e83d4f5ba56", "trajectory_id": "traj-37b577dd", "trust_state_hash": "0f6f3f895b062d7b1936ce63489c05515012f68a9fbbfabcdf5cc1f96f855197", "zod_id": "zod_e2dc6bbbbd1be05d" }, { "agent_id": "finance-reconciliation-agent", "attestation_digest": "2a9a0c26f9ed0435cc3c0ca1f4f6f54d9a0c227c7b006586214c5944527d3178", "authorization_id": "zauth_940df22acbc8bf1cfa5fe4a9", "consensus_certificate": { "agent_id": "finance-reconciliation-agent", "attestation_digest": "2a9a0c26f9ed0435cc3c0ca1f4f6f54d9a0c227c7b006586214c5944527d3178", "capability_hash": "076de4b2c26efb3f82866ea6805eb03e5c829641be72191a98a170d275a333ae", "certificate_digest": "940df22acbc8bf1cfa5fe4a953cecaee697b2fe5c1d1525bec7adea42cc83419", "consensus": { "certificate_hash": "8ac1bce61c1dcf478b33ff53fa3884f67adcd359aea7c797d4a9083c9337c9e3", "client_id": "cain45-hypervisor", "cluster_id": "cain-mr-01", "operation": { "action": "zod_authorization", "data": { "certificate_digest": "940df22acbc8bf1cfa5fe4a953cecaee697b2fe5c1d1525bec7adea42cc83419", "domain": "CAIN45/ZOD-AUTHORIZATION-ORDER/v1", "zod_id": "zod_f927008c759c61da" }, "resource": "zod/zod_f927008c759c61da" }, "quorum": 3, "request_id": "zod-zod_f927008c759c61da-940df22acbc8bf1c", "sequence": 13380, "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-3" ], "view": 51 }, "context_hash": "6af310dfceb06533b6e648401c28d16582a746050daa9f62cdfe6df98c05245d", "decision": { "certificate_hash": "357af2dc353fe01baafc872a24913597da2fa2877301761c9f77a176e6687bd8", "decision_id": "fd_fbd4d17efc714c1f8b7b6dec", "pre_verdict": "REQUIRE_APPROVAL", "sequence": 13377 }, "expires_at": 1790549886.6957726, "human_approval": { "human_id": "operator-approver", "signature_b64": "YcwY0Lt8fjDpU3WzbVBG7+tEdt51gs4ljeWLtF32apoeCcWNhwwg8BMCbqoY3TZn7pWGbuYk/NhGBEDR2PObCA==" }, "instance_id": "finance-reconciliation-agent-instance-002", "issuer_public_key_b64": "FD9SrHuHFkte8kW/BAUbBaP+bKqRoElTX5WTYSdGlng=", "mcp_capability_hash": "c0b7e0275d027788ed9ba35d77a379508ef71de0be331ea2183f78eb14d2fd4f", "network_policy_hash": "79234252c41c68841d64e022bf76921e2903878f57e3f467aee4c3d9bb403c68", "not_before": 1790549286.6957726, "parent_zod": null, "policy_hash": "484729ee2da57d3e8fe94a2b7c10f5282f6e2d1e411bddd1dc6d0449380881f0", "resource_policy_hash": "5da5bd5771b9774bc90af7b5139c8fe9a1310c6d82af27ebbaf0680640e5e7e0", "risk_state_hash": "e2767d6c542c756e5ae2c53d75e1a562f533ca4f2e53f05da0f478632ad0a582", "signature_b64": "MiT5q0eHnggQ6Ug5VgsN1Z2wfcPPn5LF39jRN8FcFkhACXP6c4m+3C9FSNAsjSVAQIk0KjfAxq/d9DQslJzRCA==", "spec_hash": "2d196169ed45ab3b758a990f4288f99da1c267e379b8981c6ce89045385b1890", "tenant_id": "cus_cain45_demo", "trajectory_id": "traj-84d250e3", "trust_state_hash": "0f6f3f895b062d7b1936ce63489c05515012f68a9fbbfabcdf5cc1f96f855197", "zod_id": "zod_f927008c759c61da" }, "context_hash": "6af310dfceb06533b6e648401c28d16582a746050daa9f62cdfe6df98c05245d", "created_at": 1790549286.6957726, "evidence_root": "bb7faabe8b4a8d1f14e323cf17e21d13fd1f81a270ecc34c6f4bc981bcbe278a", "expires_at": 1790549886.6957726, "instance_id": "finance-reconciliation-agent-instance-002", "parent_zod": null, "policy_hash": "484729ee2da57d3e8fe94a2b7c10f5282f6e2d1e411bddd1dc6d0449380881f0", "risk_state_hash": "e2767d6c542c756e5ae2c53d75e1a562f533ca4f2e53f05da0f478632ad0a582", "spec": { "capabilities": [ "CALL_MCP_TOOL" ], "delegation_allowed": false, "limits": { "cpu_quota_pct": 50, "max_pids": 32, "memory_bytes": 268435456, "tmpfs_bytes": 67108864, "wall_seconds": 60 }, "network": { "egress": [] }, "resources": [ "tool:kv.get" ], "tools": [ "kv.get" ], "ttl_seconds": 600 }, "state": "TERMINATED", "tenant_id": "cus_cain45_demo", "trajectory_head": null, "trajectory_id": "traj-84d250e3", "trust_state_hash": "0f6f3f895b062d7b1936ce63489c05515012f68a9fbbfabcdf5cc1f96f855197", "zod_id": "zod_f927008c759c61da" } ] }