# Evolution 15 limitations (classified)

| Limitation | Status | Evidence | Note |
|---|---|---|---|
| HARDWARE ATTESTATION | **UNKNOWN** | no TPM/TEE/secure-boot evidence was tested; sensor and actuator keys are software keys at the adapter boundary | declared in cain45.l5.spatial_physical.LIMITATIONS |
| REAL WORLD SENSOR INTEGRATION | **NOT_IMPLEMENTED** | sensors are signed test doubles; no camera/lidar/radar/GNSS driver is integrated | declared in cain45.l5.spatial_physical.LIMITATIONS |
| REAL VEHICLE INTEGRATION | **NOT_IMPLEMENTED** | no vehicle adapter exists | declared in cain45.l5.spatial_physical.LIMITATIONS |
| REAL ROBOT INTEGRATION | **NOT_IMPLEMENTED** | ReferenceAdapter records commands; it drives nothing | declared in cain45.l5.spatial_physical.LIMITATIONS |
| REAL ACTUATOR INTEGRATION | **NOT_IMPLEMENTED** | GovernedActuator is an adapter contract; enforcement holds only if the real actuator is reachable solely through it | declared in cain45.l5.spatial_physical.LIMITATIONS |
| MULTI HOST BEHAVIOR | **UNVERIFIED** | all E15 runs are single-process | declared in cain45.l5.spatial_physical.LIMITATIONS |
| LARGE SCALE SIMULATION | **NOT_IMPLEMENTED** | the only simulator is a reference constant-velocity model; external simulators plug in but none was tested | declared in cain45.l5.spatial_physical.LIMITATIONS |
| WORLD MODEL ACCURACY | **UNKNOWN** | CAIN governs world-model outputs as PREDICTED evidence; it does not measure model accuracy | declared in cain45.l5.spatial_physical.LIMITATIONS |
| SEMANTIC TRUTH | **UNKNOWN** | signatures and hashes prove origin and integrity, not that an observation is true | declared in cain45.l5.spatial_physical.LIMITATIONS |
| SIMULATION TO REALITY FIDELITY | **UNKNOWN** | the gap engine measures supplied data only; no real outcomes were collected | declared in cain45.l5.spatial_physical.LIMITATIONS |
| THIRD PARTY REPRODUCTION | **NOT_PERFORMED** | only the bundled clean-room verifier has been run, by us | declared in cain45.l5.spatial_physical.LIMITATIONS |
| VULNERABILITY INTELLIGENCE | **UNKNOWN** | no vulnerability feed is integrated | declared in cain45.l5.spatial_physical.LIMITATIONS |
| HOSTED E15 SERVICE | **NOT_IMPLEMENTED** | E15 is a TESTED library; it is not mounted on the hosted gateway | declared in cain45.l5.spatial_physical.LIMITATIONS |
| REAL WORLD ATTACK VALIDATION | **NOT_PERFORMED** | all adversarial scenarios run in-process | declared in cain45.l5.spatial_physical.LIMITATIONS |
| E8 MultiPartyAuthorization counts approvals without verifying their signatures | **REDUCED** | E15 PhysicalHumanAuthority verifies every human signature, role, scope, nonce and freshness BEFORE handing the approvals to the E8 counter | E8 itself is unchanged (changing it would alter earlier evolutions) |
| E8 check_bindings treats an absent live root as unchanged (lenient) | **REDUCED** | a physical action always supplies every E8 root (e8_current) and E15 re-checks all nine bindings STRICTLY (absent -> *_UNVERIFIED refusal) before E8 runs | digital (non-E15) E8 callers keep the earlier semantics |
| Sensor/actuator keys are software keys | **STILL UNKNOWN** | signatures bind an observation to a registered adapter key; a compromised adapter host can sign lies (SENSOR_SIGNATURE_VALID != TRUE) | P1 |