TESTED integration library · not hosted · not third-party reviewed · ephemeral keys.
Intelligence proposes; CAIN decides; E8 commits; evidence remembers. Governance coverage is reported honestly: paths CAIN is not in are UNCONTROLLED or UNKNOWN.
Invariants 166/166; scenarios 889/889 held; mutation 11/11 killed; TypeScript SDK INTACT (tamper BROKEN); tests 11 passed / 0 failed; clean-room verifier INTACT (1187/1187).
| Step | Result |
|---|---|
| AGENT | OK |
| IDENTITY | OK |
| PERCEPTION | OK |
| MEMORY | OK |
| REASONING | OK |
| PLANNING | OK |
| CAPABILITY | OK |
| DELEGATION | OK |
| NEGOTIATION | OK |
| CONTRACT | OK |
| AUTHORITY | OK |
| RISK | OK |
| CONSEQUENCE | OK |
| AUTHORIZATION | OK |
| TRANSACTION | OK |
| E8 | OK |
| EXECUTION | OK |
| ENVIRONMENT | OK |
| OBSERVATION | OK |
| EVIDENCE | OK |
| LEARNING | OK |
| SELF_TEST | OK |
| SELF_IMPROVEMENT_PROPOSAL | OK |
| GOVERNANCE_REVIEW | OK |
| CANARY | OK |
| PROMOTION | OK |
| REJECTION | OK |
| CONTINUOUS_REAUTHORIZATION | OK |
| Category | Held |
|---|---|
| protocol_integration | 109/109 |
| self_improvement | 103/103 |
| identity_delegation | 164/164 |
| economic | 101/101 |
| memory_perception | 101/101 |
| supply_chain | 103/103 |
| multi_agent | 103/103 |
| world_action | 105/105 |
| Path | Class |
|---|---|
| hosted gateway /fabric decisions (cainstudio.online) | ENFORCED |
| MCPGate proxy on the live cluster cain-mr-02 (operator test) | ENFORCED |
| hosted MCPGate on customer tool calls | PARTIALLY_ENFORCED |
| E25-E30 library actions inside one process | ENFORCED |
| self-hosted SDK guard / MCP proxy | PARTIALLY_ENFORCED |
| agent sandbox (namespaces, cgroups, seccomp) | ENFORCED |
| kernel eBPF enforcement | UNCONTROLLED |
| tool calls that do not pass through CAIN | UNCONTROLLED |
| physical actuators, robots, vehicles | UNCONTROLLED |
| third-party agents on the open internet | UNKNOWN |
| hourly cluster health proofs | MONITORED |
| public evidence inventory crawl | OBSERVED |