{
 "disclaimer": "Internal analytical scenario, NOT an appraisal, NOT a financing valuation, NOT a guarantee.",
 "families": [
  {
   "commercial_product": "CAIN Convergence",
   "defensibility": "medium-high",
   "external_evidence": "none (contract object)",
   "formal_properties": [
    "P301",
    "P302",
    "P335"
   ],
   "id": "CONV-IP-01",
   "implementation": "AutonomousChangeContract.to_body/digest + issue_contract/verify_contract",
   "name": "AutonomousChangeContract bound to an exact change fingerprint + authority",
   "novelty": "high",
   "open_source_boundary": "SDK surface open; gate internals private",
   "patent_counsel_review_required": true,
   "prior_art_comparison": "signed capability tokens exist; binding a *change fingerprint + promotion criteria* to delegated authority is the new element",
   "production_evidence": "used by the REAL multi-adapter experiment",
   "source_paths": [
    "cain/convergence/objects.py"
   ],
   "standards_potential": "medium (change-contract schema)",
   "switching_cost": "high (becomes the control point)",
   "technical_problem": "An authorization can drift from the change it was meant to cover (TOCTOU).",
   "technical_solution": "A signed contract that binds change_id, principal, agent/model/runtime identity, fingerprint digest, authority version, targets, preconditions, effects, envelope, blast radius, rollback/compensation, evidence/causal requirements and promotion criteria.",
   "tests": "tests/test_convergence.py",
   "tier": "NOVEL",
   "trade_secret_potential": "medium"
  },
  {
   "commercial_product": "CAIN Convergence",
   "defensibility": "medium",
   "external_evidence": "none",
   "formal_properties": [
    "P301",
    "P302"
   ],
   "id": "CONV-IP-02",
   "implementation": "compute_fingerprint + ChangeFingerprint.digest",
   "name": "ChangeFingerprint (material-change detection across ten surfaces)",
   "novelty": "high",
   "open_source_boundary": "open",
   "patent_counsel_review_required": true,
   "prior_art_comparison": "content hashes exist; multi-surface material-change fingerprint bound to authority is the new element",
   "production_evidence": "experiment fingerprints real DB/Git/HTTP changes",
   "source_paths": [
    "cain/convergence/objects.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "medium",
   "technical_problem": "Two changes that look the same can differ materially in effect surface.",
   "technical_solution": "Canonical digest over code/config/infra/db/dependency/policy/model/tool/runtime/environment surfaces plus target resources and expected/forbidden effects.",
   "tests": "tests/test_convergence.py",
   "tier": "NOVEL",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "CAIN ChangeGuard",
   "defensibility": "medium-high",
   "external_evidence": "none",
   "formal_properties": [
    "P306",
    "P325",
    "P326"
   ],
   "id": "CONV-IP-03",
   "implementation": "next_stage/cannot_skip + STAGES",
   "name": "ProgressiveAuthorityReleaseEngine (staged release + backwards demotion)",
   "novelty": "high",
   "open_source_boundary": "open SDK",
   "patent_counsel_review_required": true,
   "prior_art_comparison": "least-privilege and staged rollouts exist; tying each authority increment to fresh change evidence and demoting on contradiction is new",
   "production_evidence": "experiment advances NO_EXECUTION->LIMITED_PRODUCTION",
   "source_paths": [
    "cain/convergence/authority.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "high",
   "technical_problem": "Passing static checks is treated as entitlement to full authority.",
   "technical_solution": "Stages 0-6 (NO_EXECUTION..FULL_AUTHORITY); each transition needs NEW evidence; authority can move backwards to LIMITED/CANARY/PAUSED/REVOKED.",
   "tests": "tests/test_convergence.py",
   "tier": "NOVEL",
   "trade_secret_potential": "medium"
  },
  {
   "commercial_product": "CAIN ChangeGuard",
   "defensibility": "medium-high",
   "external_evidence": "none",
   "formal_properties": [
    "P307",
    "P308",
    "P309",
    "P318",
    "P324",
    "P340"
   ],
   "id": "CONV-IP-04",
   "implementation": "decide(required_evidence=...) + PROMOTION_STATES",
   "name": "EvidenceGatedPromotionEngine (UNKNOWN never PROMOTE)",
   "novelty": "high",
   "open_source_boundary": "open SDK",
   "patent_counsel_review_required": true,
   "prior_art_comparison": "Argo/Flagger gate on metrics; gating on external reality + causal outcome + independent observer is new",
   "production_evidence": "REAL experiment promotes only on MATCH+CAUSES+PROMOTE",
   "source_paths": [
    "cain/convergence/promotion.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "high",
   "technical_problem": "Metric gates promote on correlation and treat absence of evidence as success.",
   "technical_solution": "Promotion is a first-class decision requiring reality match, causal verification, mission outcome, SLO health, policy integrity, authority continuity, observer independence, no forbidden effect, fresh evidence and no contradiction; UNKNOWN maps to UNKNOWN/HOLD, never PROMOTE.",
   "tests": "tests/test_convergence.py",
   "tier": "NOVEL",
   "trade_secret_potential": "high"
  },
  {
   "commercial_product": "CAIN RollbackProof",
   "defensibility": "medium-high",
   "external_evidence": "none",
   "formal_properties": [
    "P310",
    "P311",
    "P312",
    "P313",
    "P314"
   ],
   "id": "CONV-IP-05",
   "implementation": "evaluate + RollbackEffectContract + verify_rollback",
   "name": "RollbackVerificationEngine (7 states; ROLLBACK CLAIM != PROOF)",
   "novelty": "high",
   "open_source_boundary": "open SDK",
   "patent_counsel_review_required": true,
   "prior_art_comparison": "rollback tooling reports success; requiring externally verified restoration is new",
   "production_evidence": "REAL PostgreSQL rollback + observed restoration",
   "source_paths": [
    "cain/convergence/rollback.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "high",
   "technical_problem": "A rollback request is treated as restoration.",
   "technical_solution": "Distinct states REQUESTED/EXECUTED/OBSERVED/RECONCILED/CAUSALLY_ATTRIBUTED/VERIFIED/RESTORED; RESTORATION_UNKNOWN when unproven; partial cannot become complete; compensation failure stays visible; irreversible restore claims rejected.",
   "tests": "tests/test_convergence.py",
   "tier": "NOVEL",
   "trade_secret_potential": "medium"
  },
  {
   "commercial_product": "CAIN ChangeProof",
   "defensibility": "medium-high",
   "external_evidence": "none",
   "formal_properties": [
    "P337",
    "P338",
    "P339",
    "P340"
   ],
   "id": "CONV-IP-06",
   "implementation": "ChangeOutcomeCertificate + verify_certificate + cain-convergence-verify/verify.py",
   "name": "ChangeOutcomeCertificate + clean-room recomputation",
   "novelty": "high",
   "open_source_boundary": "verifier open",
   "patent_counsel_review_required": true,
   "prior_art_comparison": "attestation exists; recomputing a *promotion verdict* in a clean room is new",
   "production_evidence": "clean-room verifies the REAL experiment bundles",
   "source_paths": [
    "cain/convergence/certificate.py",
    "cain-convergence-verify/verify.py"
   ],
   "standards_potential": "high (change certificate schema)",
   "switching_cost": "high",
   "technical_problem": "A promotion verdict cannot be independently reproduced.",
   "technical_solution": "A signed certificate whose promotion/rollback semantics are recomputed by a zero-CAIN-import verifier; tampered/replayed/forged certificates are rejected.",
   "tests": "tests/test_convergence.py",
   "tier": "NOVEL",
   "trade_secret_potential": "medium"
  },
  {
   "commercial_product": "CAIN Convergence",
   "defensibility": "low-medium",
   "external_evidence": "none",
   "formal_properties": [
    "P327",
    "P333"
   ],
   "id": "CONV-IP-07",
   "implementation": "assess/within_authorized + BLAST_LEVELS",
   "name": "ChangeBlastRadiusEngine (explicit R0-R6 classification)",
   "novelty": "medium",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "blast-radius notions exist; binding an explicit classification to reauthorization is unusual",
   "production_evidence": "used in experiment blast_radius=R1",
   "source_paths": [
    "cain/convergence/risk.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "medium",
   "technical_problem": "Risk of a change is implicit and unbound to authorization.",
   "technical_solution": "Explicit CAIN risk levels R0 isolated .. R6 mission-critical; expansion beyond the authorized level forces reauthorization.",
   "tests": "tests/test_convergence.py",
   "tier": "UNUSUAL",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "CAIN CanaryGuard",
   "defensibility": "low-medium",
   "external_evidence": "none",
   "formal_properties": [
    "P333",
    "P334"
   ],
   "id": "CONV-IP-08",
   "implementation": "validate_boundaries + evaluate",
   "name": "GovernedCanaryEngine (external-state success; liveness != success)",
   "novelty": "medium",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "canary analysis exists (Argo/Flagger); external-state success criteria is unusual",
   "production_evidence": "experiment canary observed on real PostgreSQL",
   "source_paths": [
    "cain/convergence/canary.py"
   ],
   "standards_potential": "low",
   "switching_cost": "medium",
   "technical_problem": "Canaries are called successful on liveness/HTTP 200/tests.",
   "technical_solution": "A canary is bound to fingerprint/target/blast radius/duration/budget/metrics and is successful only when the external state satisfies the contract.",
   "tests": "tests/test_convergence.py",
   "tier": "UNUSUAL",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "CAIN ChangeGuard",
   "defensibility": "low-medium",
   "external_evidence": "none",
   "formal_properties": [
    "P303",
    "P304",
    "P305",
    "P332"
   ],
   "id": "CONV-IP-09",
   "implementation": "verify(preconditions=...)",
   "name": "ChangePreconditionVerifier (UNKNOWN blocks; no inference)",
   "novelty": "medium",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "preflight checks exist; explicit UNKNOWN-blocks semantics is unusual",
   "production_evidence": "experiment verifies preconditions before canary",
   "source_paths": [
    "cain/convergence/gates.py"
   ],
   "standards_potential": "low",
   "switching_cost": "medium",
   "technical_problem": "Missing preconditions are inferred rather than treated as unknown.",
   "technical_solution": "Ten named preconditions; any UNKNOWN blocks autonomous change; P305 forbids inferring UNKNOWN into verified.",
   "tests": "tests/test_convergence.py",
   "tier": "UNUSUAL",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "CAIN ChangeGuard",
   "defensibility": "low-medium",
   "external_evidence": "none",
   "formal_properties": [
    "P320",
    "P321"
   ],
   "id": "CONV-IP-10",
   "implementation": "assess/may_inform_promotion",
   "name": "WorldModelAdmissibilityGate (external calibration required)",
   "novelty": "medium",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "simulator accreditation is studied; binding it to a change promotion gate is unusual",
   "production_evidence": "none (no production model fed to it)",
   "source_paths": [
    "cain/convergence/gates.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "medium",
   "technical_problem": "A simulator that scores well on synthetic data is treated as ground truth.",
   "technical_solution": "Admissibility states UNVERIFIED..ASSURANCE_ELIGIBLE; synthetic-only cannot become eligible and a prediction cannot independently establish ground truth.",
   "tests": "tests/test_convergence.py",
   "tier": "UNUSUAL",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "CAIN Convergence",
   "defensibility": "low-medium",
   "external_evidence": "none",
   "formal_properties": [
    "P319"
   ],
   "id": "CONV-IP-11",
   "implementation": "assess",
   "name": "ChangeCollusionDefense (role correlation + reciprocal approval)",
   "novelty": "medium",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "collusion research exists; making consensus fail closed as non-independence in a change gate is unusual",
   "production_evidence": "none",
   "source_paths": [
    "cain/convergence/collusion.py"
   ],
   "standards_potential": "low",
   "switching_cost": "medium",
   "technical_problem": "Consensus among correlated agents is mistaken for independent assurance.",
   "technical_solution": "Detects shared model/memory/evidence/telemetry/identity-root/infrastructure, reciprocal approval and evidence laundering; consensus is not independence.",
   "tests": "tests/test_convergence.py",
   "tier": "UNUSUAL",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "MCPGate Change Enforcement",
   "defensibility": "low",
   "external_evidence": "none",
   "formal_properties": [
    "P308",
    "P310",
    "P326"
   ],
   "id": "CONV-IP-12",
   "implementation": "ConvergencePreflightStage/PromotionStage/RollbackProofStage",
   "name": "CONVERGENCE live enforcement (3 restriction-only stages, default_stages_v23)",
   "novelty": "low",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "policy admission controllers exist; a restriction-only evidence gate is integration, not a new primitive",
   "production_evidence": "INSTALLED by default (RESTRICTION_ONLY)",
   "source_paths": [
    "cain/convergence/hosted_stages.py",
    "cain/continuum/hosted_pipeline.py"
   ],
   "standards_potential": "low",
   "switching_cost": "high",
   "technical_problem": "Change governance must be enforceable on the live MCP path without granting authority.",
   "technical_solution": "convergence_preflight/convergence_promotion/rollback_proof stages that can only ADD a refusal and abstain otherwise.",
   "tests": "tests/test_convergence.py",
   "tier": "INTEGRATION",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "CAIN Convergence",
   "defensibility": "low",
   "external_evidence": "REAL PostgreSQL 16 via docker + local Git + ntfy.sh HTTP + real k3s Kubernetes API (disposable namespace)",
   "formal_properties": [
    "P337",
    "P340"
   ],
   "id": "CONV-IP-13",
   "implementation": "convergence_experiment.run_experiment",
   "name": "REAL multi-adapter experiment (PostgreSQL + Git + HTTP + Kubernetes), success + failure paths",
   "novelty": "low",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "CI/CD demos exist; evidence-gated promotion + verified rollback across 3 systems is integration",
   "production_evidence": "artifacts/convergence/CONVERGENCE_EXPERIMENT.json",
   "source_paths": [
    "scripts/cain42_evolution/convergence_experiment.py"
   ],
   "standards_potential": "low",
   "switching_cost": "medium",
   "technical_problem": "Change assurance is usually demonstrated in simulation.",
   "technical_solution": "A real experiment: authorized change -> canary -> independent observation -> reality match -> causal verification -> PROMOTE; and a real failure -> MISMATCH -> real rollback -> verified restoration on PostgreSQL and on Kubernetes; all clean-room verified.",
   "tests": "runs, writes bundles",
   "tier": "INTEGRATION",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "n/a",
   "defensibility": "n/a",
   "external_evidence": "none",
   "formal_properties": [
    "P301",
    "P302",
    "P303",
    "P304",
    "P305",
    "P306",
    "P307",
    "P308",
    "P309",
    "P310",
    "P311",
    "P312",
    "P313",
    "P314",
    "P315",
    "P316",
    "P317",
    "P318",
    "P319",
    "P320",
    "P321",
    "P322",
    "P323",
    "P324",
    "P325",
    "P326",
    "P327",
    "P328",
    "P329",
    "P330",
    "P331",
    "P332",
    "P333",
    "P334",
    "P335",
    "P336",
    "P337",
    "P338",
    "P339",
    "P340"
   ],
   "id": "CONV-IP-14",
   "implementation": "run_convergence_lab/run_convergence_mutations/run_property_suite_convergence",
   "name": "CONVERGENCE lab (36 categories) + 34 mutations + P301-P340",
   "novelty": "none (engineering)",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "n/a",
   "production_evidence": "none (test evidence)",
   "source_paths": [
    "cain/convergence/lab.py",
    "cain/convergence/properties16.py"
   ],
   "standards_potential": "low",
   "switching_cost": "low",
   "technical_problem": "Change gates must be adversarially and mutation tested.",
   "technical_solution": "Deterministic >=100,000-case lab with false-autonomous-promotion==0, 34 killed mutations, and 40 formal properties.",
   "tests": "tests/test_convergence.py",
   "tier": "ENGINEERING",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "n/a",
   "defensibility": "n/a",
   "external_evidence": "real PostgreSQL (bounded)",
   "formal_properties": [],
   "id": "CONV-IP-15",
   "implementation": "ChangeChaosEngine + soak_convergence + bench_convergence + build_convergence_evidence",
   "name": "Change chaos (25 faults) + bounded real PostgreSQL soak + per-op benchmark + hashed manifest",
   "novelty": "none (engineering)",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "n/a",
   "production_evidence": "artifacts/convergence/SOAK_REPORT.json",
   "source_paths": [
    "cain/convergence/chaos.py",
    "scripts/cain42_evolution/soak_convergence.py"
   ],
   "standards_potential": "low",
   "switching_cost": "low",
   "technical_problem": "Change control must fail safe under faults and be reproducible.",
   "technical_solution": "25 fail-safe chaos faults, a bounded real soak, a per-op benchmark and a hashed evidence manifest.",
   "tests": "chaos 25/25",
   "tier": "ENGINEERING",
   "trade_secret_potential": "low"
  },
  {
   "commercial_product": "CAIN RollbackProof",
   "defensibility": "medium-high",
   "external_evidence": "REAL PostgreSQL rollback + REAL Kubernetes namespace deletion, each externally verified",
   "formal_properties": [
    "P312",
    "P313",
    "P315",
    "P335"
   ],
   "id": "CONV-IP-16",
   "implementation": "CrossSystemChangeContract + per-adapter rollback verification + convergence_experiment failure path (PostgreSQL AND Kubernetes)",
   "name": "Heterogeneous cross-system change transaction with per-system independently verified restoration",
   "novelty": "high",
   "open_source_boundary": "open SDK",
   "patent_counsel_review_required": true,
   "prior_art_comparison": "saga/compensation patterns exist; requiring PER-SYSTEM external restoration proof bound to one authorized change is the new element",
   "production_evidence": "artifacts/convergence/CONVERGENCE_EXPERIMENT.json + SOAK_REPORT.json (both systems)",
   "source_paths": [
    "cain/convergence/objects.py",
    "cain/convergence/rollback.py",
    "scripts/cain42_evolution/convergence_experiment.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "high",
   "technical_problem": "A single change spanning heterogeneous systems (database + orchestrator) can partially complete; a per-system rollback 'success' is not proof the transaction recovered.",
   "technical_solution": "One change bound across PostgreSQL + Kubernetes (CrossSystemChangeContract); each child system's rollback is externally observed and restored before the transaction is declared recovered; partial state cannot be declared consistent (P315, P335).",
   "tests": "tests/test_convergence.py + real experiment",
   "tier": "NOVEL",
   "trade_secret_potential": "medium"
  },
  {
   "commercial_product": "CAIN InfraGuard",
   "defensibility": "low-medium",
   "external_evidence": "REAL k3s v1.30.4 cluster; disposable namespaces; verified deletion",
   "formal_properties": [
    "P311",
    "P312"
   ],
   "id": "CONV-IP-17",
   "implementation": "KubernetesChangeAdapter.apply/observe/rollback (namespace + resource scope)",
   "name": "Real Kubernetes production change adapter with disposable-namespace lifecycle and externally verified namespace deletion",
   "novelty": "medium",
   "open_source_boundary": "open",
   "patent_counsel_review_required": false,
   "prior_art_comparison": "kubectl/controllers exist; proving restoration by external namespace absence inside an evidence-gated change gate is unusual",
   "production_evidence": "artifacts/convergence/CONVERGENCE_EXPERIMENT.json + SOAK_REPORT.json",
   "source_paths": [
    "cain/convergence/adapters.py"
   ],
   "standards_potential": "medium",
   "switching_cost": "high",
   "technical_problem": "A Kubernetes rollback returns success even when the resource/namespace still exists.",
   "technical_solution": "Disposable-namespace change lifecycle; restoration is proven by the external ABSENCE of the namespace after deletion, not by the API return code.",
   "tests": "real k3s execution (experiment + soak)",
   "tier": "UNUSUAL",
   "trade_secret_potential": "low"
  }
 ],
 "note": "Breadth count before any prior-art or novelty review; NOT a valuation, NOT a legal opinion, NOT a patent filing.",
 "schema": "CAIN42/CONVERGENCE-IP-REGISTER/v1"
}