{
  "schema": "cain42.review.rubric.v1",
  "note": "Evidence coverage only. No self-assigned final grade. Missing evidence is not a pass.",
  "criteria": [
    {
      "name": "Architecture and threat-model clarity",
      "weight": 15,
      "evidence_available": [
        "system map",
        "7-moat docs",
        "deployment manifest"
      ],
      "evidence_missing": [
        "independent architecture review"
      ],
      "known_failures": [
        "three brands presented as three boundaries"
      ],
      "externally_reproduced": false
    },
    {
      "name": "Implementation correctness",
      "weight": 20,
      "evidence_available": [
        "operator test report (1,963/1,978)",
        "source exists"
      ],
      "evidence_missing": [
        "public source",
        "independent test run"
      ],
      "known_failures": [
        "2026-10-02 audit could not reproduce full suite"
      ],
      "externally_reproduced": false
    },
    {
      "name": "Enforcement-boundary security",
      "weight": 25,
      "evidence_available": [
        "/fabric/status enforce mode",
        "boundary statement"
      ],
      "evidence_missing": [
        "controlled bypass tests",
        "side-effect evidence"
      ],
      "known_failures": [
        "boundary opt-in; bypass paths exist"
      ],
      "externally_reproduced": false
    },
    {
      "name": "Evidence and verifier rigor",
      "weight": 15,
      "evidence_available": [
        "E42 verifier v2",
        "15/15 assurance suite",
        "categorised totals",
        "publisher attestation"
      ],
      "evidence_missing": [
        "independent verifier review"
      ],
      "known_failures": [
        "v1 defects (now fixed and published)"
      ],
      "externally_reproduced": false
    },
    {
      "name": "Reliability and performance",
      "weight": 10,
      "evidence_available": [
        "soak heartbeat",
        "performance index"
      ],
      "evidence_missing": [
        "completed soak",
        "benchmark code/hardware/percentiles"
      ],
      "known_failures": [
        "prior soaks failed/stopped; current RUNNING"
      ],
      "externally_reproduced": false
    },
    {
      "name": "Developer usability",
      "weight": 10,
      "evidence_available": [
        "wheel in dist/",
        "OpenAPI"
      ],
      "evidence_missing": [
        "clean-env install proof",
        "minimal example",
        "MCPGate/CLAWX guides"
      ],
      "known_failures": [],
      "externally_reproduced": false
    },
    {
      "name": "Website claim accuracy and clarity",
      "weight": 5,
      "evidence_available": [
        "banner reconciliation"
      ],
      "evidence_missing": [
        "corrected banners applied"
      ],
      "known_failures": [
        "contradictory assurance banners on all three sites"
      ],
      "externally_reproduced": false
    }
  ]
}