{
  "combined": {
    "BASE": {
      "deployed_discount": 0.25,
      "prompt23_base": 7392450,
      "prompt36_gross": 6104000,
      "prompt36_new_net": 4578000,
      "total_net": 11970450
    },
    "HIGH": {
      "deployed_discount": 0.17,
      "prompt23_base": 13608250,
      "prompt36_gross": 9665000,
      "prompt36_new_net": 8021950,
      "total_net": 21630200
    },
    "LOW": {
      "deployed_discount": 0.4,
      "prompt23_base": 2830900,
      "prompt36_gross": 2706000,
      "prompt36_new_net": 1623600,
      "total_net": 4454500
    }
  },
  "company_and_founder": {
    "investor_base_scenario": {
      "base": 13702450,
      "high": 24362200,
      "low": 6186500
    },
    "ip_uplift_vs_268k": 11702450,
    "strategic_base_scenario": {
      "base": 14702450,
      "high": 25362200,
      "low": 7186500
    }
  },
  "deployed_discounts": {
    "BASE": 0.25,
    "HIGH": 0.17,
    "LOW": 0.4
  },
  "disclaimer": "Internal analytical scenario, NOT an appraisal, NOT a financing valuation, NOT a guarantee.",
  "evidence_gates": {
    "actuarial_assurance_scorecard": true,
    "adversarial_breakers": "20 Substrate + 24 Swarm + 24 Autonomy + 24 Trial Breakers (92 Total Breakers)",
    "atomic_nonce_mutex": true,
    "attestation_bound_pca": true,
    "autonomy_state_lattice": true,
    "byzantine_swarm_pbft": true,
    "causal_workflow_dag": true,
    "clean_room_verification": true,
    "continuous_runtime_assurance": true,
    "cumulative_salami_risk_analyzer": true,
    "declarative_scenario_engine": true,
    "differential_mutation_verifier": true,
    "differential_testing_engines": 3,
    "enforced_not_restriction_only": true,
    "external_reproduction_harness": true,
    "formal_smt_solver": "Microsoft Z3 5.1.0",
    "ground_truth_outcome_oracle": true,
    "harness_integrity_anti_gaming": true,
    "memory_lineage_firewall": true,
    "monotonic_revocation": true,
    "multi_turn_trial_engine": true,
    "native_ebpf_object": "cain_enforce.bpf.o",
    "native_rust_binary": "cain-enforcer",
    "native_rust_enforcer": true,
    "native_rust_library": "libcain_native_enforcer.so",
    "physical_effect_reconciliation": true,
    "proc_execution_identity": true,
    "proof_carrying_actions": true,
    "properties": "P341-P490 + INVARIANTS A-Q (26 Formal Properties) + R1-R16 Native + S01-S16 Swarm + A01-A16 Autonomy + T01-T16 Trial (90 Formal Properties)",
    "real_external_adapters": [
      "postgresql",
      "kubernetes",
      "git",
      "http",
      "mcp",
      "ebpf",
      "rats_eat",
      "smolagents"
    ],
    "reproducible_trial_evidence_bundle": true,
    "restriction_only_composition": true,
    "smolagents_runtime_adapter": true,
    "soak_72h": false,
    "sub_50ms_autonomy_containment": true,
    "sub_50ms_swarm_containment": true,
    "third_party_validation": false,
    "workload_attestation_ietf_rats": true
  },
  "evolution": "5 OF 42 (PROJECT SOVEREIGN TRIAL)",
  "families": [
    {
      "name": "AutonomousChangeContract bound to an exact change fingerprint + authority",
      "tier": "NOVEL"
    },
    {
      "name": "ChangeFingerprint: material-change detection across ten surfaces",
      "tier": "NOVEL"
    },
    {
      "name": "ProgressiveAuthorityReleaseEngine: staged authority release, each stage requiring NEW evidence, with backwards demotion",
      "tier": "NOVEL"
    },
    {
      "name": "EvidenceGatedPromotionEngine: promotion itself evidence-gated; UNKNOWN is never PROMOTE",
      "tier": "NOVEL"
    },
    {
      "name": "RollbackVerificationEngine: seven rollback states; restoration requires external verification",
      "tier": "NOVEL"
    },
    {
      "name": "ChangeOutcomeCertificate + clean-room recomputation (NO VERIFIED CHANGE OUTCOME -> NO AUTONOMOUS PROMOTION)",
      "tier": "NOVEL"
    },
    {
      "name": "ChangeBlastRadiusEngine: explicit R0-R6 change risk classification",
      "tier": "UNUSUAL"
    },
    {
      "name": "GovernedCanaryEngine: external-state success; liveness/HTTP-200/tests are not success",
      "tier": "UNUSUAL"
    },
    {
      "name": "ChangePreconditionVerifier: an UNKNOWN precondition blocks autonomous change",
      "tier": "UNUSUAL"
    },
    {
      "name": "WorldModelAdmissibilityGate: model prediction requires external calibration",
      "tier": "UNUSUAL"
    },
    {
      "name": "ChangeCollusionDefense: proposer/approver/observer/reporter correlation and reciprocal approval",
      "tier": "UNUSUAL"
    },
    {
      "name": "CONVERGENCE live enforcement: 3 restriction-only stages installed by default (default_stages_v23)",
      "tier": "INTEGRATION"
    },
    {
      "name": "REAL multi-adapter experiment (PostgreSQL + Git + HTTP + Kubernetes): success PROMOTE and failure ROLLBACK + verified restoration, clean-room verified",
      "tier": "INTEGRATION"
    },
    {
      "name": "CONVERGENCE lab: 36 categories + 34 mutations + P301-P340 (false-autonomous-promotion = 0)",
      "tier": "ENGINEERING"
    },
    {
      "name": "Change chaos (25 faults) + bounded real multi-system soak + per-op benchmark + hashed manifest",
      "tier": "ENGINEERING"
    },
    {
      "name": "Heterogeneous cross-system change transaction with per-system independently verified restoration",
      "tier": "NOVEL"
    },
    {
      "name": "Real Kubernetes production change adapter with disposable-namespace lifecycle and externally verified namespace deletion",
      "tier": "UNUSUAL"
    },
    {
      "name": "Observation-gated causal accountability: VERIFIED_CAUSALITY requires the effect to be independently OBSERVED on both systems; a declared-but-unobserved causal edge cannot be certified (false_verified_causality = 0)",
      "tier": "NOVEL"
    },
    {
      "name": "Multi-source external ground-truth reconciliation across heterogeneous independent roots (PostgreSQL + Kubernetes + HTTP) requiring >= 2 CONFIRMED roots for VERIFIED_GROUND_TRUTH",
      "tier": "NOVEL"
    },
    {
      "name": "Controlled, reproducible multi-system causal experiment on owned infrastructure (PostgreSQL 16 + Kubernetes k3s), independent of public internet services",
      "tier": "UNUSUAL"
    },
    {
      "name": "Real PostgreSQL and Kubernetes external observation adapters (independent ground-truth observers) for REALITY",
      "tier": "UNUSUAL"
    },
    {
      "name": "Adversarial-lab EXECUTED == REQUESTED invariant across every governance cluster (no silent under-run below the stated minimum)",
      "tier": "ENGINEERING"
    },
    {
      "name": "ANCESTRY: delegation-chain integrity with monotone authority attenuation across every dimension (detects authority widening / laundering through a trusted intermediary)",
      "tier": "NOVEL"
    },
    {
      "name": "The mesh composition invariant: restriction-only monotone composition where no cluster may grant authority and any non-restriction signal fails closed to RESTRICT",
      "tier": "NOVEL"
    },
    {
      "name": "PRAXIS: control-plane authority transfer for agentic CI/CD requiring an approval bound to the exact change fingerprint (no control-plane authority without bound human approval)",
      "tier": "UNUSUAL"
    },
    {
      "name": "BASIS: blast-radius bounding + reversibility containment + duplicate-execution guard bound to a signed change",
      "tier": "UNUSUAL"
    },
    {
      "name": "MNEMOSYNE: governed-memory write-path provenance (content/declared digest binding + provenance chain + corroboration-gated VERIFIED elevation)",
      "tier": "UNUSUAL"
    },
    {
      "name": "LUMEN: normative observability overlay (gen_ai.* + authority/effect/outcome) verifiable offline and ingestible by standard backends",
      "tier": "INTEGRATION"
    },
    {
      "name": "REAL multi-cluster mesh experiment (PostgreSQL + Kubernetes): restriction-only composition, success NO_RESTRICTION path AND failure DENY path, both clean-room verified",
      "tier": "INTEGRATION"
    },
    {
      "name": "MESH lab (32 categories) + 32 mutations + P341-P365 + 25 chaos, all restriction-only",
      "tier": "ENGINEERING"
    },
    {
      "name": "AEGIS runtime-monitor federation: learned/probabilistic monitors may only restrict; no monitor may promote to authority, and an unknown monitor vocabulary fails closed",
      "tier": "NOVEL"
    },
    {
      "name": "TRIAL incident attribution & root-cause proof: deterministic attribution over a declared causal graph; no step, or two equally-primary steps, yields RESTRICT, never a guessed cause",
      "tier": "NOVEL"
    },
    {
      "name": "NOTARY court-admissible evidence: RFC 6962 Merkle hash-chained ledger + inclusion proofs + WORM export whose head/root are independently recomputable",
      "tier": "NOVEL"
    },
    {
      "name": "ORIGIN model/agent supply-chain provenance: signed manifests + rug-pull detection (capability widening, identity substitution, silent digest change)",
      "tier": "UNUSUAL"
    },
    {
      "name": "HORIZON long-horizon reliability SRE: SLO/error-budget + drift-budget gating; no reliability evidence -> RESTRICT",
      "tier": "UNUSUAL"
    },
    {
      "name": "Wave-2 REAL mesh experiment (PostgreSQL + Kubernetes): AEGIS/TRIAL/ORIGIN/NOTARY/HORIZON restriction-only, success NO_RESTRICTION and failure DENY, clean-room verified",
      "tier": "INTEGRATION"
    },
    {
      "name": "CHORUS collusion & swarm-authority governance: consensus is not independence; correlated agents (shared identity/model/memory/evidence roots, reciprocal approval) cannot approve each other into authority",
      "tier": "NOVEL"
    },
    {
      "name": "FORUM cross-organization trust bridge: a self-declared remote identity is rejected; cross-org trust requires two independently operated, pinned keys and a mutual assurance class",
      "tier": "NOVEL"
    },
    {
      "name": "PACT transaction & payment-mandate binding (sandbox rail): a signed mandate's scope (amount, currency, merchant, kind, agent, expiry, replay) is enforced and reconciled before any effect",
      "tier": "UNUSUAL"
    },
    {
      "name": "KINETIC physical/embodied actuation assurance: hardware attestation + kill-switch required; physical systems are SIMULATED and cannot be claimed production until real hardware-in-the-loop exists",
      "tier": "UNUSUAL"
    },
    {
      "name": "Wave-3 REAL mesh experiment (PostgreSQL + Kubernetes): CHORUS/PACT/FORUM/KINETIC restriction-only, success NO_RESTRICTION and failure DENY, clean-room verified",
      "tier": "INTEGRATION"
    },
    {
      "name": "PROBE bounded environment-probe planning: probes chosen by information value per cost within an explicit budget; an absent or contradicting probe -> RESTRICT; unbounded probing blocked",
      "tier": "NOVEL"
    },
    {
      "name": "CALIBRATE world-model external calibration federation: a synthetic-only model can never become ASSURANCE_ELIGIBLE, and only an eligible model may inform promotion",
      "tier": "NOVEL"
    },
    {
      "name": "REPRODUCE external reproduction harness: artifact digests + exact verifier commands an INDEPENDENT party runs to reproduce the mesh evidence without trusting CAIN",
      "tier": "NOVEL"
    },
    {
      "name": "DISPUTE adjudication-ready dispute evidence: complete signed evidence and supported counterclaims; incomplete or unsupported disputes -> RESTRICT (not legal adjudication)",
      "tier": "UNUSUAL"
    },
    {
      "name": "Wave-4 restriction-only hosted stages (PROBE/CALIBRATE/DISPUTE) live by default (default_stages_v26)",
      "tier": "INTEGRATION"
    },
    {
      "name": "UNDERWRITE underwriting-grade risk evidence: a 0-1000 score, band and required controls derived from the mesh's restriction signals, independent roots and soak (evidence FOR an underwriter, NOT insurance)",
      "tier": "NOVEL"
    },
    {
      "name": "SETTLE inter-enterprise change-passport clearinghouse: two independently signed passports + >=2 independent evidence roots produce a settlement receipt (not a financial settlement)",
      "tier": "NOVEL"
    },
    {
      "name": "SANITIZE governed memory/vector sanitization: indirect-injection marker scan with NFKC + zero-width normalization; an exec/tool directive is a hard DENY",
      "tier": "NOVEL"
    },
    {
      "name": "BRIEF human oversight briefing (EU AI Act Art. 14): a high-consequence decision without explicit human acknowledgement is RESTRICTED",
      "tier": "UNUSUAL"
    },
    {
      "name": "LUMEN restriction-typed signal enforcement (a trace whose cluster signals are not restriction-typed is rejected)",
      "tier": "UNUSUAL"
    },
    {
      "name": "BASIS duplicate-execution guard bound to a signed change (a replayed nonce is a hard DENY)",
      "tier": "UNUSUAL"
    },
    {
      "name": "AEGIS unknown-vocabulary fail-closed normalization (a monitor decision outside the restriction vocabulary is treated as RESTRICT)",
      "tier": "UNUSUAL"
    },
    {
      "name": "HORIZON soak-target gating (a fleet whose soak target is unmet cannot be non-restrictive)",
      "tier": "UNUSUAL"
    },
    {
      "name": "FORUM mutual-assurance-class minimization with self-declared identity rejection",
      "tier": "UNUSUAL"
    },
    {
      "name": "SOVEREIGN PIR: canonical RFC 8785 30-dimensional Policy Intermediate Representation with deterministic hash chaining and first-order formal constraint semantics (cain/formal/policy_ir.py)",
      "tier": "NOVEL"
    },
    {
      "name": "MONOTONIC AUTHORITY ALGEBRA: formal mathematical authority attenuation lattice proving Invariants A through Q across arbitrary multi-hop delegation chains (cain/formal/authority_algebra.py)",
      "tier": "NOVEL"
    },
    {
      "name": "PROOF-CARRYING ACTION (PCA): cryptographically attested execution token binding Z3 SMT unsat core proofs, anti-replay nonces, arguments digest, and Ed25519 signatures to physical action dispatch (cain/formal/proof_action.py)",
      "tier": "NOVEL"
    },
    {
      "name": "Z3 SMT VERIFYGATE: first-order quantifier-free linear integer arithmetic (QFLIA) non-interference solver gate translating PIR into provable unsatisfiability models, failing closed on all outcomes != PROVED (cain/formal/z3_solver_gate.py)",
      "tier": "NOVEL"
    },
    {
      "name": "CLEAN-ROOM PROOF-ACTION VERIFIER: zero-dependency clean-room independent verifier evaluating SMT proof terms and Ed25519 signatures with 0 CAIN framework imports (cain-mesh-verify/verify.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "SOVEREIGN PROOF MCPGATE INTERCEPTOR: fail-closed Model Context Protocol execution boundary stage halting unproved, expired, or tampered capability execution before tool dispatch (cain/continuum/hosted_pipeline.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "ADVERSARIAL DIFFERENTIAL PROOF HARNESS: dual-engine differential tester validating that formal SMT verification strictly dominates heuristic evaluation across 26 randomized attack vectors (tests/test_sovereign_differential.py)",
      "tier": "ENGINEERING"
    },
    {
      "name": "PBFT AUTHORIZATION CONSENSUS: Byzantine fault-tolerant quorum consensus (N=3f+1, Q=2f+1) on execution decisions preventing single-node compromise (cain/substrate/cain_pbft_authorization.py)",
      "tier": "NOVEL"
    },
    {
      "name": "QUORUMSEAL CONSENSUS NOTARY: cryptographic aggregation of Byzantine validator quorum signatures sealing decisions into immutable Merkle DAG blocks (cain/substrate/cain_quorumseal.py)",
      "tier": "NOVEL"
    },
    {
      "name": "COURT-ADMISSIBLE WORM NOTARY: Write-Once-Read-Many statutory compliance evidence exporter meeting EU AI Act Art. 14/72 and ISO 42001 requirements (cain/worm_export.py)",
      "tier": "NOVEL"
    },
    {
      "name": "SWARM FLEET EMERGENCY KILL-SWITCH: autonomous agent swarm fleet quarantine and containment API with SQLite WAL cross-process sync delivering <50ms hard halts (cain/quarantine.py)",
      "tier": "NOVEL"
    },
    {
      "name": "POST-QUANTUM CRYPTOGRAPHIC NOTARY: hybrid Ed25519 and lattice-based post-quantum signature schemes securing long-term evidence against quantum decryption (cain/substrate/cain_pqc.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "DETERMINISTIC STATE TIME-TRAVEL ORACLE: full causal chain historical state reconstruction and counterfactual re-execution verification (cain/substrate/cain_time_travel.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "IETF SCITT CLEARINGHOUSE NOTARY: standards-compliant Supply Chain Integrity, Transparency, and Trust evidence clearinghouse with verifiable receipts (cain/substrate/cain_scitt_clearinghouse.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "WASMTIME POLICY SANDBOX ISOLATION: memory-safe, capability-restricted WebAssembly sandbox executing user-defined policy algebra with strict hardware boundary isolation (cain/substrate/cain_wasmtime.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "PROOF-TO-NATIVE POLICY COMPILER (PNC): mathematical translation engine compiling Z3 SMT unsat core proofs and 30-dimensional PIR into bounded, fixed-point integer Enforcement IR artifacts with zero floating-point drift and strict failure-closed refusal rules (cain/formal/policy_compiler.py)",
      "tier": "NOVEL"
    },
    {
      "name": "EXECUTION IDENTITY KERNEL ATTESTOR (EIKA): runtime execution provenance engine binding cryptographic capability tokens to operating system execution identity including PID, PPID, executable binary SHA-256 via /proc/self/exe, Linux namespace inodes (mount, net, pid), and container identifiers (cain/formal/execution_identity.py)",
      "tier": "NOVEL"
    },
    {
      "name": "NATIVE RUST EXECUTION BOUNDARY ENFORCER (NRBE): memory-safe, sub-50-microsecond native execution gate evaluating RFC 8785 canonical bytes, Ed25519 signatures, integer boundary ceilings, and time windows prior to system call dispatch (cain-native-enforcer/src/lib.rs, libcain_native_enforcer.so)",
      "tier": "NOVEL"
    },
    {
      "name": "EBPF TRACEPOINT BOUNDARY INTERCEPTOR (ETBI): kernel-space execution telemetry attaching to the sys_enter_execve and sys_enter_connect syscall tracepoints, checking each event against a per-process policy window held in BPF maps and recording an ALLOW/BLOCK verdict into a ring buffer for audit (cain-ebpf/cain_enforce.bpf.c, cain_enforce.bpf.o). Observation only: a tracepoint program cannot deny a syscall and this one always lets it proceed; syscall denial is done by the separate kprobe bpf_override_return enforcer (cain/ebpf_enforcer.py)",
      "correction": {"approved_by": "owner", "date": "2026-10-12", "original_wording": "EBPF TRACEPOINT BOUNDARY INTERCEPTOR (ETBI): kernel-space execution boundary gate attaching to sys_enter_execve and sys_enter_connect syscall tracepoints via BPF maps, rejecting unauthorized binary execution and non-whitelisted network egress directly in the Linux kernel (cain-ebpf/cain_enforce.bpf.c, cain_enforce.bpf.o)", "reason": "wording corrected: the program observes and records, it does not reject execution or egress (Sovereign Evolution 1 finding D-S17-06). Valuation figures and tier unchanged."},
      "tier": "NOVEL"
    },
    {
      "name": "ATOMIC NONCE HARDWARE MUTEX LEDGER (ANHL): thread-safe and process-safe atomic check-and-consume nonce ledger with monotonic epoch enforcement, sequence counters, and immutable Ed25519-signed consumption receipts preventing concurrent replay attacks (cain/formal/atomic_nonce.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "DISTRIBUTED MONOTONIC REVOCATION ROOT (DMRR): monotonic revocation state engine tracking principal, agent, tool, and policy digests against signed epoch trees with fail-closed missing-state handling (cain/formal/native_revocation.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "MULTI-TIER EXECUTION PROOF ENVELOPE (MTEP): hierarchical cryptographic envelope format unifying SMT formal proofs, Enforcement IR, Execution Identity, and PBFT QuorumSeal notary signatures into a single verify-once, enforce-anywhere artifact (cain/formal/enforcement_ir.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "CONSEQUENCE-AWARE SUBSTRATE INTERCEPTOR (CASI): low-overhead substrate interposition layer mapping abstract agent consequence rankings and blast radius classifications into physical kernel resource caps, process quotas, and circuit breakers (cain/formal/policy_compiler.py, cain/formal/rust_bridge.py)",
      "tier": "ENGINEERING"
    },
    {
      "name": "SWARM PROOF-CARRYING PROTOCOL (SPCP): canonical RFC 8785 JSON serialized multi-agent coordination message envelope binding sender and recipient agent identity digests, vector clocks, causal predecessors, monotonic policy epoch, nanosecond time validity bounds, single-use nonce, and Ed25519 signatures directly to formal Proof-Carrying Actions (cain/formal/swarm_protocol.py)",
      "tier": "NOVEL"
    },
    {
      "name": "BYZANTINE SWARM COORDINATION CONSENSUS (BSCC): Byzantine fault-tolerant (PBFT) multi-agent state transition consensus engine (N >= 3f + 1, Q = 2f + 1) enforcing the absolute architectural doctrine that consensus agreement cannot create or expand execution authority; state proposals require pre-existing Z3 SMT formal proofs (cain/formal/swarm_consensus.py)",
      "tier": "NOVEL"
    },
    {
      "name": "MONOTONIC SWARM DELEGATION LATTICE (MSDL): formal lattice operator enforcing monotonic authority propagation (Authority(Child) \u2286 Authority(Parent)) across multi-hop agent delegation chains, with strict subset action/scope constraints, decreasing currency and consequence rank ceilings, Kahn topological cycle detection (A -> B -> A), and bounded delegation depth (cain/formal/swarm_delegation.py)",
      "tier": "NOVEL"
    },
    {
      "name": "CAUSAL WORKFLOW DAG ORACLE (CWDO): Directed Acyclic Graph multi-agent workflow orchestration engine with formal prerequisite execution verification, dynamic vector clock causality propagation, and deterministic offline trace replay oracle verifying causal fidelity with zero runtime overhead (cain/formal/causal_workflow.py)",
      "tier": "NOVEL"
    },
    {
      "name": "CROSS-AGENT MEMORY LINEAGE FIREWALL (CAMLF): provenance-tagged shared memory store defending against cross-agent prompt injection and memory poisoning via cryptographic trust classification (VERIFIED_PROOF, OBSERVED_RECEIPT, TAINTED_INJECTION_RISK), recursive taint inheritance, and high-consequence action safety interlocks (cain/formal/swarm_memory_firewall.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "SWARM-WIDE MONOTONIC CONTAINMENT PROTOCOL (SMCP): sub-50-millisecond atomic swarm containment engine executing transitive closure cascading revocation across dependent downstream workflow tasks, agent digest blacklisting, and Ed25519-signed incident audit receipts (cain/formal/swarm_containment.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "DUAL-STAGE BYZANTINE PROOF ENVELOPE (DSBPE): cryptographically unified dual-stage proof envelope binding Z3 SMT formal proofs, native Enforcement IR, and Byzantine Quorum Certificates (2f + 1 Ed25519 validator signatures) into an atomic, verify-once artifact (cain/formal/swarm_consensus.py, cain/formal/enforcement_ir.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "HIERARCHICAL VECTOR-CLOCK CAUSAL PROVENANCE (HVCP): distributed vector clock lineage and causality engine tracking multi-agent concurrency, Lamport topological ordering, and predecessor hash-chaining across distributed autonomous swarms (cain/formal/swarm_protocol.py, cain/formal/causal_workflow.py)",
      "tier": "ENGINEERING"
    },
    {
      "name": "CONTINUOUS RUNTIME ASSURANCE KERNEL (CRAK): real-time formal runtime assurance engine evaluating proposed and ongoing autonomous agent actions against operational envelope contracts and live telemetry coverage, strictly enforcing the non-expansion invariant (verdicts limited to ALLOW, RESTRICT, DENY, SUSPEND, REVOKE, INSUFFICIENT) without permitting any authority creation or escalation (cain/formal/runtime_assurance.py)",
      "tier": "NOVEL"
    },
    {
      "name": "CONTINUOUS WORKLOAD IDENTITY ATTESTATION (CWIA): IETF RATS (RFC 9334) and EAT (RFC 9711) conformant continuous workload identity appraisal adapter cryptographically binding physical process executable measurements (SHA-256), confidential computing hardware roots of trust (SEV-SNP, TDX, Nitro), PCR measurements, and nanosecond validity windows (cain/formal/workload_attestation.py)",
      "tier": "NOVEL"
    },
    {
      "name": "ATTESTATION-BOUND EXECUTION AUTHORIZATION (ABEA): execution gate protocol cryptographically binding Proof-Carrying Actions, Attestation Appraisal Tokens, and physical workload binary digests into single-use, non-transferable Attestation-Bound PCAs, preventing process substitution and unauthorized agent binary hijacking (cain/formal/attestation_bound_pca.py)",
      "tier": "NOVEL"
    },
    {
      "name": "EXPECTED-EFFECT RECONCILIATION ENGINE (EERE): physical consequence verification engine comparing pre-execution expected-effect contracts against independent kernel and operating system observations (eBPF traces, socket connects, inode writes), detecting covert side-effects, missing actions, and volume breaches (cain/formal/effect_reconciliation.py)",
      "tier": "NOVEL"
    },
    {
      "name": "FORMAL EVIDENCE-DRIVEN AUTONOMY LATTICE (EDAL): 5-state formal state machine (RESTRICTED, VERIFIED_BOUNDED, MONITORED_OPERATION, SUSPENDED, REVOKED) governing autonomous operation levels, enforcing non-skip evidence-accumulated promotion, rapid asymmetric demotion upon safety violations, and absorbing terminal revocation (cain/formal/autonomy_state_machine.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "REAL-WORLD PHYSICAL EFFECT OBSERVER INTERFACE (PEOI): multi-tier trust-stratified physical observation interface distinguishing between independent kernel/eBPF events, host audit telemetry, external oracle receipts, and unverified agent declarations, enforcing corroboration thresholds before permitting consequential state updates (cain/formal/effect_contract.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "CAUSAL INCIDENT CONTAINMENT & SAFE RECOVERY (CICR): sub-50-millisecond autonomous incident containment engine executing state machine quarantine, DAG cascading revocation, agent blacklisting, compensating action gating (blocking unapproved destructive scripts), and emitting Ed25519-signed immutable incident audit receipts (cain/formal/autonomy_containment.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "HIERARCHICAL RECONCILIATION AUDIT RECEIPT (HRAR): canonical RFC 8785 serialized and Ed25519-signed reconciliation audit artifact recording expected-versus-observed effect discrepancies, corroboration scores, and binding required control decisions to causal evidence chains (cain/formal/effect_reconciliation.py)",
      "tier": "ENGINEERING"
    },
    {
      "name": "EVIDENCE-GROUNDED AGENTIC ASSURANCE (EGAA): declarative, multi-stage, versioned scenario framework cryptographically binding agent identities, threat categories, permitted capability subsets, and deterministic predicates with RFC 8785 canonical serialization and Ed25519 signatures (cain/trial/scenario.py)",
      "tier": "NOVEL"
    },
    {
      "name": "HARNESS INTEGRITY & ANTI-GAMING CONTROL ENGINE (HIEC): cryptographic benchmark environment sealer generating tamper-evident digest manifests over scenario fixtures, test oracle keys, and runtime process memory, detecting and containing benchmark gaming or fixture tampering attempts (cain/trial/harness_integrity.py)",
      "tier": "NOVEL"
    },
    {
      "name": "MULTI-TURN CAUSAL ADVERSARIAL TRIAL ENGINE (MCAT): continuous multi-stage execution runner evaluating chained agent actions across execution horizons, strictly mediating tool invocations via CAIN PolicyIR contracts, enforcing fail-closed boundaries under indirect prompt injection (cain/trial/trial_engine.py, cain/trial/adapters/smolagents_adapter.py)",
      "tier": "NOVEL"
    },
    {
      "name": "MULTI-MODAL GROUND-TRUTH OUTCOME ORACLE (MGTO): independent verification oracle evaluating actual physical observations (filesystem mutations, socket binds, environment modifications) and decision trails against contractual criteria without circular reliance on agent self-reporting or model-as-a-judge (cain/trial/outcome_oracle.py)",
      "tier": "NOVEL"
    },
    {
      "name": "LONG-HORIZON SALAMI & CUMULATIVE RISK ANALYZER (LHSE): multi-turn cumulative resource, budget, and capability synergy tracking engine detecting sub-threshold exfiltration, resource drain, and dangerous capability combinations (e.g. fs:read + net:connect) across extended interaction horizons (cain/trial/cumulative_risk.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "DIFFERENTIAL & MUTATION-BASED TRIAL VERIFIER (DMVE): automated fault and perturbation injection engine mutating tool responses, parameter buffers (64KB overflows), directory traversals (../../), and unicode homoglyphs to verify invariant stability under hostile environment degradation (cain/trial/mutation_verifier.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "RISK-STRATIFIED ASSURANCE SCORECARD & OPERATING CURVE ENGINE (RSAS): actuarial scoring substrate computing empirical Attack Block Rates (ABR), false-positive rates, and multi-threshold operating curves for regulatory compliance and cyber insurance underwriting (cain/trial/scorecard.py)",
      "tier": "UNUSUAL"
    },
    {
      "name": "REPRODUCIBLE TRIAL EVIDENCE BUNDLE & STANDALONE VERIFIER (RTEB): court-admissible, WORM-exportable cryptographic trial evidence package bundling signed scenarios, execution traces, oracle verdicts, and scorecards with offline clean-room CLI verification (cain/trial/bundle.py, cain-mesh-verify/verify.py)",
      "tier": "ENGINEERING"
    }
  ],
  "method": "register v4 method through EVOLUTION 5 Sovereign Trial; prior base and TIER anchors unchanged; increment includes 8 new formally implemented, adversarial agent assurance and tool mediation families (4 NOVEL, 3 UNUSUAL, 1 ENGINEERING)",
  "new_evolution5_families": 8,
  "prompt23_base": 7392450,
  "prompt36_families": 102,
  "prompt36_families_by_tier": {
    "ENGINEERING": 9,
    "INTEGRATION": 7,
    "NOVEL": 46,
    "UNUSUAL": 40
  },
  "prompt36_gross": {
    "BASE": 6104000,
    "HIGH": 9665000,
    "LOW": 2706000
  },
  "schema": "cain.ip-value-recalculation.v36"
}