# CAIN CONTINUUM — Hosted Governance Deployment Evidence (37/37 families)

**Date:** 2026-10-11
**Schema:** `CAIN42/CONTINUUM-HOSTED-PIPELINE-DEPLOY-EVIDENCE/v1`
**Machine-readable:** [`HOSTED_PIPELINE_DEPLOY_EVIDENCE.json`](./HOSTED_PIPELINE_DEPLOY_EVIDENCE.json) ·
[`HOSTED_HARNESS_DEPLOY_EVIDENCE.json`](./HOSTED_HARNESS_DEPLOY_EVIDENCE.json) ·
[`HOSTED_HARNESS_SERVICE_EVIDENCE.json`](./HOSTED_HARNESS_SERVICE_EVIDENCE.json)

## What was deployed

**All 37 Prompt 6–11 families are now deployed on the hosted path.**

- **34 families** run as ordered, restriction-only, fail-closed **stages** in
  `cain/continuum/hosted_pipeline.py`, installed as middleware on the hosted MCP server
  (`platform-gateway/main.py`, `/mcp`). Every hosted `tools/call` passes through the chain **before** the tool body
  runs. Each stage can only ADD a refusal; ordinary traffic abstains. A stage that raises is treated as DENY.
- **3 families are verification harnesses**, not runtime gates (the formal property suites P1–P55, the distributed
  authority lab, and governance mutation testing). Their honest "in the path" form is the hosted verification
  service (`platform-gateway/routers/continuum_verify.py` + `scripts/cain42_continuum/hosted_harness_worker.py`):
  the gateway serves the cached result and a **separate worker process** runs the harnesses.

Each stage invokes an existing Prompt 6–11 library (no reimplementation):

| Stage | Library invoked |
|---|---|
| `consequence_certificate` | `cain.continuum.consequence`, `cain.continuum.certificate` |
| `autonomy_envelope` | `cain.apex.autonomy` |
| `authority_budget` | `cain.authority.budget` |
| `authority_drift` | `cain.continuum.drift` |
| `threshold_authority` | `cain.apex.threshold` |
| `supply_chain` | `cain.runtime.supplychain` |
| `source_evolution` | `cain.continuum.source_evolution` |
| `world_model_firewall` | `cain.continuum.world_governance` |
| `physical_gate` | `cain.continuum.physical` |
| `attestation` | `cain.runtime.attestation` |
| `economic_risk` | `cain.continuum.economics` |
| `fork_detector` | `cain.legion.fork` |
| `evidence_grade` | `cain.apex.evidence_grade` |
| `capability_passport` | `cain.runtime.passport` |
| `provenance_continuity` | `cain.authority.provenance` |
| `cross_agent_continuity` | `cain.continuum.cross_agent` |
| `state_transition_receipt` | `cain.continuum.state_transition` |
| `emergent_authority` | `cain.apex.emergent` |
| `world_state_ledger` | `cain.continuum.world_ledger` |
| `authority_ledger` | `cain.apex.ledger` |
| `counterfactual_authority` | `cain.continuum.counterfactual_authority` |
| `policy_compiler` | `cain.authority.policy_compiler` |
| `a2a_handshake` | `cain.runtime.a2a` |
| `skill_trust` | `cain.runtime.skills` |
| `memory_continuity` | `cain.continuum.memory_continuity` |
| `skill_continuity` | `cain.continuum.skill_continuity` |
| `authority_lineage` | `cain.authority.prover` |
| `authority_continuity` | `cain.apex.inheritance` |
| `proof_graph` | `cain.authority.proof_graph` |
| `runtime_bus` | `cain.runtime.runtime_bus` |
| `transaction_envelope` | `cain.runtime.transactions` |
| `governed_tool_adapter` | `cain.continuum.adapter_agentsdk` |
| `commit_time_gate` | `cain.omniscience.commit_gate` |
| `replay_envelope` | hosted nonce registry |

Harness service (`POST /fabric/continuum/verify/run` spawns the worker; `GET /fabric/continuum/verify` serves the
cached result): `cain.apex.properties2`, `cain.continuum.properties3`, `cain.legion.properties` (P1–P55),
`cain.continuum.distributed_multiproc`, `cain.runtime.mutation`.

## Live verification (production gateway)

Service `cain-platform-gateway.service`, `http://127.0.0.1:8088`.

- **Pipeline:** all **38** MCP wire probes matched expectation (governance code `-32001` on every DENY). The final
  batch added `commit_time_gate` (denied).
- **Harness service:** **55/55** properties, distributed lab `real_distributed=true` with `chain_ok=true` over
  **100** events, and **34/34** mutations killed — served by the gateway, computed in a separate worker process.
- Decision ledger: `/root/.cain/hosted_continuum_decisions.jsonl` (hash chain valid).
- Reproduce: `python3 scripts/cain42_continuum/hosted_pipeline_deploy_verify.py` and
  `python3 scripts/cain42_continuum/hosted_harness_deploy_verify.py`.

## Defects found and fixed while deploying (real, not glossed)

1. **Cross-process chain fork** (`cain/legion/persistence.py`): `AuthorityStore.append` read the head hash
   *outside* a write transaction, so concurrent processes forked the hash chain. Fixed with `BEGIN IMMEDIATE`
   (write lock taken before the head read). Stress: 5/5 multi-process runs clean; 195 tests pass.
2. **Mutation suite mutated the live tree**: a run left `cain/continuum/skill_continuity.py` mutated (the
   `A1` mutation), causing later runs to skip mutations and flake. Fixed: mutation testing now runs in a throwaway
   `git worktree` and the worker holds a single-run lock.
3. **The gateway OOM-killed itself** running the harnesses in-process (2026-10-11). Fixed: the gateway only serves
   the cached result; a separate worker process runs the compute.

## Honest scope (stated, not claimed)

- This proves the stages **run on the hosted decision path and enforce there**, and that the harnesses run on the
  hosted runtime.
- It does **not** bind the caller's downstream execution to the decision (MCPGate receipt-verification work).
- No patent filed; pre-revenue; no incorporation record. The figures below are an internal analytical scenario.

## Effect on the IP register

All **37 of 37** families are deployed and live-verified, so the evidence-backed net standalone IP base equals the
register's all-deployed base: **≈ $843,300** (range ≈ $473,200 – $1,447,750). Company scenario base ≈ $2,575,300
investor / ≈ $3,575,300 strategic; Vincent Noriega (100% owner, paper equity) base ≈ $2,575,300. See
`artifacts/valuation/CAIN_PROMPT11_IP_VALUE_RECALC.md`.