CAIN-42 L5 governance evidence bundle (2026-09-28)
==================================================
Reproduce with Python 3 + cryptography. These verifiers import NOTHING from CAIN.

  python3 verify_l5_unified.py CAIN42_L5_UNIFIED_BUNDLE.json      # -> VALID
  python3 verify_authority_bundle.py CAIN42_L5_AUTHORITY_BUNDLE.json  # -> VALID
  python3 verify_l5_bundle.py CAIN42_L5_EVIDENCE_BUNDLE.json      # -> VALID

What this proves: the signed artifacts verify, the trajectory chain is intact, the Merkle root matches, delegation does not escalate, the authorization decision is action-bound, and all invariant matrices hold.
What this does NOT prove: independent third-party review (none), hardware attestation (none), multi-provider diversity (none). No L5 claim is made.