CAIN-42 E8 hosted action-commit proof (e8-hosted-commit-2026-10-01)
=====================================================

This bundle proves: every hosted ALLOW on /fabric/mcp/enforce is bound to a committed, single-use,
durable, hash-chained E8 governance token; replay, risk-above-ceiling and resource-out-of-scope are
refused; the gate fails closed; and the 30 E8 invariants hold.

VERIFY (imports NO CAIN code; Python + `cryptography` only):
  python3 verify_e8_hosted_commit.py .

REBUILD:
  python3 scripts/cain42_conformance/build_e8_hosted_commit_bundle.py