{
 "entries": [
  {
   "affected": "cain_governance_compiler.ir_leq (pre-commit)",
   "class": "SemanticFailure",
   "exploit_pattern": "optimized narrowing reported as AUTHORITY_EXPANSION/UNSAFE_CHANGE (false positive; fails safe but misleads review)",
   "found_by": "test_adding_restrictions_never_widens_random (seeded)",
   "historical_event": true,
   "id": "E8-F1",
   "proof_status": "PROPERTY_TESTED",
   "regression": "tests/test_governance_compiler.py::test_regression_optimized_narrowing_is_not_reported_as_widening",
   "remediation": "ir_leq accepts a missing condition only if an OPT_RULES rule proves it implied by the resource",
   "root_cause": "diff compared optimized IRs; the optimizer drops fabric-implied conditions; leq demanded syntactic presence"
  },
  {
   "affected": "verify_package (pre-commit)",
   "class": "CompilerFailure",
   "exploit_pattern": "issuance latency ~1.2 s per package verify (equivalence corpus re-run)",
   "found_by": "benchmark",
   "historical_event": true,
   "id": "E8-F2",
   "proof_status": "MEASURED",
   "regression": "tests/test_governance_compiler.py::test_recompile_cache_is_keyed_by_full_source",
   "remediation": "recompile memo keyed by COMPILER_VERSION + full source digest; value is a digest the package must match",
   "root_cause": "verification recompiled from scratch"
  },
  {
   "affected": "optimizer design",
   "class": "SemanticFailure",
   "exploit_pattern": "removing all redundant conditions changes the fabric risk score (+10) and the high-risk rule",
   "found_by": "design review against risk_score()",
   "historical_event": true,
   "id": "E8-F3",
   "proof_status": "PROPERTY_TESTED",
   "regression": "tests/test_governance_compiler.py::test_last_condition_is_kept_so_risk_does_not_change",
   "remediation": "keep the last condition",
   "root_cause": "risk_score() counts conditions"
  },
  {
   "affected": "synthetic optimizer rule",
   "class": "Counterexample",
   "exploit_pattern": "treat source_type_in == all SOURCE_TYPES as redundant",
   "historical_event": false,
   "id": "E8-S1",
   "proof_status": "PROPERTY_TESTED",
   "regression": "tests/test_governance_compiler.py::test_unsound_optimization_rule_is_rejected",
   "remediation": "differential check rejects; rule never shipped",
   "root_cause": "validate_request accepts any source_type string"
  }
 ],
 "generated": "2026-10-04",
 "note": "Only real findings from building E8; synthetic entries are marked historical_event=false.",
 "schema": "cain.counterexample.corpus.v1"
}