{
  "bundle_type": "competitive_matrix_evidence",
  "published_at": "2026-09-12T23:20:00Z",
  "system": "CAIN Architectural Monopoly Evidence",
  "doctrine": "Deterministic Fail-Closed Runtime Trust at the Tool Execution Boundary",
  "competitor_comparisons": {
    "palo_alto_networks_prisma_ai": {
      "layer": "Layer 3/4 network packets & HTTP proxy",
      "tool_execution_boundary": false,
      "fail_closed_guarantee": false,
      "court_admissible_worm": false,
      "verdict": "Blind to autonomous agent semantic intent"
    },
    "cisco_robust_intelligence": {
      "layer": "Pre-deployment model scanning & red-teaming",
      "tool_execution_boundary": false,
      "fail_closed_guarantee": false,
      "court_admissible_worm": false,
      "verdict": "Scanner only; cannot govern live autonomous agent execution"
    },
    "lakera_guard": {
      "layer": "Conversational prompt text filtering",
      "tool_execution_boundary": false,
      "fail_closed_guarantee": false,
      "court_admissible_worm": false,
      "verdict": "Vulnerable to prompt jailbreaks and indirect prompt injection"
    },
    "cloudflare_ai_gateway": {
      "layer": "API routing, caching, and rate-limiting",
      "tool_execution_boundary": false,
      "fail_closed_guarantee": false,
      "court_admissible_worm": false,
      "verdict": "Traffic router with zero security or runtime trust primitives"
    },
    "cain_trust_fabric": {
      "layer": "In-line tool execution boundary (<15ms fast-path)",
      "tool_execution_boundary": true,
      "fail_closed_guarantee": true,
      "court_admissible_worm": true,
      "verdict": "Complete, fail-closed, court-admissible runtime trust control plane"
    }
  },
  "canonical_manifest_source": "docs/strategy/COMPETITIVE-MOAT-ANALYSIS.md"
}