Verify it yourself

1. Get the sweep script; it downloads the verifiers and samples and refuses to run a verifier that does not match SHA256SUMS:

   mkdir nullius && cd nullius
   curl -sO https://cainstudio.online/nullius-sweep.py
   pip install cryptography
   python3 -I nullius-sweep.py --download

2. Read the three verifiers. They are 464 to 733 lines each.
3. Run each on its sample (all three must print VERIFIED and exit 0):

   python3 -I verify_mission_journal.py mission.journal.jsonl --trust trust.public.json --head head.json
   python3 -I verify_execution_truth.py valid.receipt.json valid.anchors.json
   python3 -I verify_launchpad.py deployment export.json --trust lp.trust.json

4. Run the replay and tamper fixtures (must not exit 0):

   B=https://cainstudio.online/proof/bundle/sovereign-reality-evolution18-2026-10-12/fixtures
   for f in replayed.receipt0.json replayed.receipt1.json replayed.anchors.json tampered.receipt.json tampered.anchors.json; do curl -sO $B/$f; done
   python3 -I verify_execution_truth.py replayed.receipt0.json replayed.receipt1.json replayed.anchors.json; echo exit=$?
   python3 -I verify_execution_truth.py tampered.receipt.json tampered.anchors.json; echo exit=$?

5. Run the full sweep (about 4 minutes) and compare with ours:

   python3 -I nullius-sweep.py      # writes sweep.json

6. Go further: multi-field edits, reordering, truncation, a swapped trust file, python -O. If any edit you think matters is accepted, that is a finding.

Files: /evidence/nullius-verifiers-2026-10-27/ (also on mcpgate.online and clawx.click).

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.