CAIN-42 Evolution 14 proof bundle  (e14-capability-governance-2026-09-28)
==================================================================
Built 2026-09-28T23:07:09+00:00 at commit 3106ea9e1626871a44d15b879d1a864ca6846e6e. Signing key: EPHEMERAL (this build only; not a production trust root).

WHAT THIS SHOWS
  - E14 invariants C1-C30 hold: 30/30
  - CAIN-42-E14-Capability-Bench contained: 44/44
  - 174 tests passed, 0 failed: ============================= 174 passed in 5.90s ==============================
  - One real fabric run: capability -> passport -> grant -> lease -> E13 decision binding -> E8 token -> commit,
    then an emergency revocation that propagates to leases and E8 tokens (LEASE_EXAMPLES.json)

REPRODUCE (from the CAIN-42 repository; the implementation is not published on the sites)
  python3 -m pytest tests/test_cain42_e14_capability.py tests/test_cain42_e14_adversarial.py tests/test_cain42_e14_end_to_end.py -q
  bin/cain-agent capability audit
  bin/cain-agent capability bench
  bin/cain-l5 e14-simulate
  python3 scripts/cain45/build_evolution14_bundle.py

VERIFY THIS BUNDLE (imports NO CAIN-42 code; Python + `cryptography` only)
  python3 verify_e14.py .

WHAT THIS DOES NOT SHOW
  HOSTED_SERVICE = NOT_IMPLEMENTED | HARDWARE_ATTESTATION = UNKNOWN | VULNERABILITY_INTELLIGENCE = UNKNOWN |
  MULTI_HOST_SCALE = UNVERIFIED | THIRD-PARTY REPRODUCTION = NOT PERFORMED | HASH_INTEGRITY != SEMANTIC_TRUTH.
  Systems outside CAIN-42's enforcement boundary remain UNCONTROLLED / UNVERIFIED / UNKNOWN.

CAPABILITY IS POWER. POWER MUST BE BOUNDED. UNVERIFIED POWER MUST NOT EXECUTE.