CAIN-42 Evolution 37 — Autonomous Execution Mesh

TESTED library · in-process on one host · not hosted · not third-party reviewed.

The machine may move. The governance must not disappear. Every governed action runs IDENTITY → CAPABILITY → AUTHORITY → POLICY → CONTEXT → EXECUTION_ENVIRONMENT → ACTION → E8 → ENFORCEMENT → OUTCOME → PROOF → REASSESSMENT, on the real kernel and E8 commit boundary, and leaves a signed receipt. Moving an execution to another node, runtime or model is a governed state transition: authority can only shrink, and risk, spent budget, revocations, evidence and incidents travel with it.

71 signed execution receipts; invariants 1132/1132; adversarial scenarios 2720/2720; mutation 17/17; chaos 16/16 contained, 0 false allows; self-test 14/14; tests 21 passed / 0 failed; clean-room verifier INTACT (2627/2627).

Real migrations on the governed stack

Case	Expected	Result
revocations dropped at destination	REFUSED	REFUSED
monitor-only destination	REFUSED	REFUSED
authority expansion	REFUSED	REFUSED
governed migration to declared-edge-1	AUTHORIZED	AUTHORIZED

Scale (this host, in-process)

Agents	Agents/s	p50 µs	RSS MB
10	493	1547	54
100	596	1360	54
1,000	621	874	57
10,000	747	735	84
100,000	719	726	306

Adversarial categories

Category	Held
adapter	151/151
anomaly	37/37
certificate	192/192
clock	28/28
computer_use	274/274
conflict	141/141
continuity	110/110
corpus	4/4
coverage	102/102
credential	33/33
data_movement	7/7
drift	105/105
economic	65/65
edge_partition	46/46
gap	5/5
law	50/50
migration	332/332
perimeter	100/100
plan	21/21
policy_compiler	51/51
proof_replay	37/37
quorum	35/35
recovery_failover	38/38
residency	92/92
scheduler	27/27
software	165/165
spawn	101/101
substitution	280/280
supply_chain	46/46
topology	10/10
world	35/35

Limitations

In-process TESTED library: the mesh, its nodes, regions and clouds are governance records in one process on one VPS; there is no multi-cloud or multi-node deployment of E37.
Only this host is measured (environment passport); declared destinations are not measured.
Hardware attestation is UNKNOWN: no TEE on this host; the admission attestation probe has nothing to call.
Adapters were tested against a reference in-process harness; no live MCP/A2A/HTTP/gRPC server integration.
Federated cloud targets (AWS/Azure/GCP/private/bare metal/edge/hybrid) are ARCHITECTURE only.
The governance quorum is in-process (3f+1 keys, no network); it is not the networked PBFT cluster.
Event-log tail truncation is detectable only against a signed checkpoint.
Executions run on the E33 reference executors; their effects are in-process, not in an external system.
Scale numbers are single-host, in-process; 1M virtual executions exercise the fence+fingerprint fast path only (SIMULATION).
Competitor capabilities were not assessed; research radar items are unimplemented proposals.
Not hosted, no customers, not third-party reviewed.