{
  "schema": "cain42.review.e2e_workflow.v1",
  "status": "NOT_ESTABLISHED",
  "why": "A complete protected workflow (agent proposes -> CAIN authorizes -> MCPGate validates -> tool executes/refuses -> CLAWX records/verifies) requires an isolated synthetic environment with tool credentials and a protected tool, and side-effecting tests. Not run: no isolated demo tenant was provisioned and operator approval for side-effecting tests was not obtained.",
  "planned_checks": [
    "allowed action",
    "denied action",
    "changed params after approval",
    "replayed authority",
    "revoked authority",
    "wrong tenant",
    "insufficient quorum",
    "verifier unavailable",
    "direct access outside gate",
    "crash/restart during execution"
  ],
  "atomicity": "Authorization and side effects cannot be made atomic by CAIN: CAIN decides, it does not watch the upstream result (per /fabric/status execution stage). Retry semantics are NOT_ESTABLISHED; exactly-once is NOT claimed.",
  "operator_approval_required": true
}