{
 "benchmark": {
  "authority": "NONE",
  "containment_by_category": {
   "agent_bribery": {
    "contained": 12,
    "scenarios": 12
   },
   "agent_impersonation": {
    "contained": 14,
    "scenarios": 14
   },
   "artifact_substitution": {
    "contained": 11,
    "scenarios": 11
   },
   "authority_laundering": {
    "contained": 17,
    "scenarios": 17
   },
   "browser_authority_escalation": {
    "contained": 1,
    "scenarios": 1
   },
   "capability_laundering": {
    "contained": 72,
    "scenarios": 72
   },
   "capability_spoofing": {
    "contained": 36,
    "scenarios": 36
   },
   "computer_use_escalation": {
    "contained": 8,
    "scenarios": 8
   },
   "contract_laundering": {
    "contained": 23,
    "scenarios": 23
   },
   "cross_domain_escalation": {
    "contained": 58,
    "scenarios": 58
   },
   "cross_organization_attack": {
    "contained": 35,
    "scenarios": 35
   },
   "delegation_laundering": {
    "contained": 14,
    "scenarios": 14
   },
   "economic_abuse": {
    "contained": 20,
    "scenarios": 20
   },
   "economic_collusion": {
    "contained": 2,
    "scenarios": 2
   },
   "evidence_provider_outage": {
    "contained": 1,
    "scenarios": 1
   },
   "fail_open": {
    "contained": 10,
    "scenarios": 10
   },
   "fake_evidence": {
    "contained": 3,
    "scenarios": 3
   },
   "false_positive_punishment": {
    "contained": 8,
    "scenarios": 8
   },
   "identity_cycling": {
    "contained": 1,
    "scenarios": 1
   },
   "identity_provider_outage": {
    "contained": 5,
    "scenarios": 5
   },
   "incident_propagation_failure": {
    "contained": 21,
    "scenarios": 21
   },
   "memory_poisoning": {
    "contained": 8,
    "scenarios": 8
   },
   "network_partition": {
    "contained": 1,
    "scenarios": 1
   },
   "protocol_confusion": {
    "contained": 48,
    "scenarios": 48
   },
   "protocol_downgrade": {
    "contained": 35,
    "scenarios": 35
   },
   "quarantine_bypass": {
    "contained": 116,
    "scenarios": 116
   },
   "recursive_delegation": {
    "contained": 1,
    "scenarios": 1
   },
   "reputation_gaming": {
    "contained": 9,
    "scenarios": 9
   },
   "revocation_propagation_failure": {
    "contained": 18,
    "scenarios": 18
   },
   "revocation_provider_outage": {
    "contained": 1,
    "scenarios": 1
   },
   "stale_authorization": {
    "contained": 19,
    "scenarios": 19
   },
   "stale_contract": {
    "contained": 21,
    "scenarios": 21
   },
   "stale_reputation": {
    "contained": 1,
    "scenarios": 1
   },
   "supply_chain_compromise": {
    "contained": 56,
    "scenarios": 56
   },
   "sybil_network": {
    "contained": 1,
    "scenarios": 1
   },
   "trust_laundering": {
    "contained": 49,
    "scenarios": 49
   }
  },
  "discovery": {
   "n": 100,
   "p50_ms": 0.2907,
   "p95_ms": 0.716,
   "p99_ms": 1.7621
  },
  "false_negative_rate_on_bench": 0.0,
  "false_positive_rate_on_legitimate_set": 0.0,
  "firebreak_containment_ms": 12.446,
  "governed_execute_e19_e8": {
   "n": 100,
   "p50_ms": 3.4974,
   "p95_ms": 5.1399,
   "p99_ms": 6.5909
  },
  "legitimate_set_size": 42,
  "negotiate_and_contract": {
   "n": 30,
   "p50_ms": 1.2891,
   "p95_ms": 2.0217,
   "p99_ms": 2.5009
  },
  "revocation_propagation_per_identity_ms": 14.207,
  "schema": "cain42.e24.benchmark.v1",
  "unit": "milliseconds, single process, in-memory",
  "verdicts_only": {
   "n": 100,
   "p50_ms": 2.1564,
   "p95_ms": 8.0315,
   "p99_ms": 15.0571
  }
 },
 "environment": {
  "machine": "x86_64",
  "python": "3.14.4",
  "release": "7.0.0-30-generic"
 },
 "extreme_simulation": {
  "authority": "NONE",
  "injected": {
   "compromised_credentials": 100,
   "false_signal_agents": 50,
   "malicious_agents": 100,
   "partitioned_domains": 2,
   "provider_failure_window": "messages 50%..60%",
   "revoked_capability_agents": 100,
   "stale_evidence_agents": 200
  },
  "limitations": [
   "a malicious agent that shows only one anomaly kind is SUSPECTED (read-only), not quarantined; one that shows none is not detected at all in this model -- detection recall bounds containment",
   "signatures are not recomputed per simulated message",
   "authority_leakage compares the rule outcome with an independent ground truth over the same injected facts"
  ],
  "max_rss_mb": 91.1,
  "population": {
   "agents": 10000,
   "capabilities": 1000,
   "contracts": 10000,
   "delegations": 10000,
   "messages": 100000,
   "organizations": 1000,
   "protocol_classes": 13,
   "trust_domains": 100
  },
  "result_kind": "SIMULATION (controlled model; not real-world behaviour)",
  "results": {
   "allowed": 46827,
   "authority_leakage": 0,
   "denied": 53173,
   "false_quarantines": 0,
   "malicious_or_compromised_detected": 179,
   "malicious_or_compromised_undetected": 20,
   "messages_allowed_involving_undetected_malicious": 0,
   "per_message_rule_eval_ns": {
    "p50": 3512,
    "p99": 12767
   },
   "quarantined": 179,
   "suspected_only": 68
  },
  "schema": "cain42.e24.extreme-simulation.v1",
  "seconds": 2.06
 },
 "schema": "cain42.e24.benchmarks.v1"
}