CAIN-42 Evolution 9 proof bundle  (e9-agent-passport-2026-09-28)
=========================================================
Built 2026-09-28T21:05:52+00:00 at commit a263738e343eae2e40f8e87944fb3a8ba1fda066.

WHAT THIS PROVES
  - E9 invariants (P1-P15) all hold: 15/15
  - 46 tests passed, 0 failed: ============================== 46 passed in 0.53s ==============================
  - Schemas published: AgentPassport, AgentBOM, AgentProvenance, CapabilityAttestation, DelegationChain, CollectivePassport, AgentStateSnapshot
  - In-process latency measured on the build host (see PERFORMANCE.json for exact conditions)

REPRODUCE
  python3 -m pytest tests/test_cain42_e9_passport.py tests/test_cain42_e9_provenance.py \
      tests/test_cain42_e9_end_to_end.py -q
  bin/cain-agent audit
  python3 scripts/cain45/build_evolution9_bundle.py

VERIFY (imports NO CAIN-42 code; Python + `cryptography` only)
  python3 verify_e9.py .

LIMITS
  TESTED library: the passport/provenance fabric is part of the L5 kernel library on the operator host; it is not a hosted identity service. | Attestation here is over canonical software/configuration digests and a supplied measurement. It is NOT hardware attestation (no TPM/TEE); unknown hardware attestation stays UNKNOWN. | No vulnerability database is embedded: vulnerability_status is UNKNOWN unless a real source provided it. | Delegation-link signature verification checks presence in the library; end-to-end cryptographic verification of every link is delegated to the existing authority fabric / PBFT path. | The transaction guarantees are stated for the GOVERNED evidence/state layer only; arbitrary external systems are not claimed to support rollback (compensating controls instead). | Framework adapters (E9 Part 31) are not claimed: no adapter is published, therefore none is described as supported. | No third party has reviewed this bundle; the clean-room verifier shares no CAIN imports but was written by the same operator. | Performance numbers are from a single in-process run on the build host with the stated workload; they are not a production benchmark.

UNKNOWN STAYS UNKNOWN. NO PROVENANCE -> NO ELEVATED TRUST.