{
 "claims": [
  {
   "artifacts": [
    {
     "bundle": "pbft-evolution2-2026-09-24",
     "file": "PBFT_QC_BUNDLE.json",
     "sha256": "f96088a8edf710b38b3cf22a7c25dd04e2758f7ff7ae9583b8eddf4b04cb2dde"
    },
    {
     "bundle": "pbft-evolution2-2026-09-24",
     "file": "verify_pbft_qc_bundle.py.txt",
     "sha256": "ba452ce42528f11f7f5235727a65cae25a34072bc52b4711fd72581615d06009"
    }
   ],
   "claim_id": "C42-PBFT-QC",
   "evidence_level": 5,
   "evidence_level_meaning": "reproducible public verification",
   "limits": "disposable cluster on one host",
   "statement": "A 4-node CAIN-42 PBFT cluster produced authentic quorum certificates (>= 3 of 4 pinned Ed25519 members) with an identical decision chain on every node across a primary failover.",
   "status": "VERIFIED",
   "verification_method": "python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json  (or index.html in a browser)"
  },
  {
   "artifacts": [
    {
     "bundle": "pbft-evolution3-2026-09-24",
     "file": "PBFT_QC_BUNDLE.json",
     "sha256": "43e1c61004d3d53a1f76d96f72a7241ef59793a2f77d9beda5f6b40559e9c9a4"
    }
   ],
   "claim_id": "C42-FAST-PATH",
   "evidence_level": 5,
   "evidence_level_meaning": "reproducible public verification",
   "limits": "bounded model (single slot, 3 views); not deployed live",
   "statement": "The Evolution 3 fast path commits only with all 4 members' votes and its view-change rule was model-checked (the naive rule was shown unsafe); a real run produced FAST_COMMIT_QCs that verify.",
   "status": "VERIFIED",
   "verification_method": "python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json"
  },
  {
   "artifacts": [],
   "claim_id": "C42-FAST-PATH-LATENCY",
   "evidence_level": 2,
   "evidence_level_meaning": "automated test evidence",
   "limits": "negative result; host CPU-bound",
   "statement": "The fast path did NOT produce a measurable latency improvement on this host (paired A/B, 95% CI includes 0).",
   "status": "BENCHMARKED",
   "verification_method": "scripts/cain42_bft/pbft_ab_bench.py (results in the certification)"
  },
  {
   "artifacts": [
    {
     "bundle": "dag-evolution4-2026-09-24",
     "file": "DAG_CLUSTER_EVIDENCE.json",
     "sha256": "10c08dab4e70a7a5782b9aafe92e7c88e63038085cce3a8a143abb660797bc09"
    },
    {
     "bundle": "dag-evolution4-2026-09-24",
     "file": "verify_dag_bundle.py.txt",
     "sha256": "f544555b9275d412bdd2b459cf780d351058b3755792f44dfb7f8377a5d58fd5"
    }
   ],
   "claim_id": "C42-DAG-ORDER",
   "evidence_level": 5,
   "evidence_level_meaning": "reproducible public verification",
   "limits": "disposable cluster; ordering bias removed in Evolution 5 (measured), fairness beyond position bias not measured",
   "statement": "DAG data is availability-certified (3 of 4), anchored only through PBFT, and ordered identically on all 4 nodes including a crash-restarted one; the verifier recomputes the order.",
   "status": "VERIFIED",
   "verification_method": "python3 verify_dag_bundle.py DAG_CLUSTER_EVIDENCE.json"
  },
  {
   "artifacts": [
    {
     "bundle": "cain42-proof-package-2026-09-24",
     "file": "manifest.json",
     "sha256": "c50397779c5aed594357a3f295362b2c5c69f074fd7f096a23db2e3d995f0b26"
    },
    {
     "bundle": "cain42-proof-package-2026-09-24",
     "file": "calls.json",
     "sha256": "b6ef823aceaef65e4c84d617314bdfafc7cfc9dee0367c7e1beef53a9098f839"
    },
    {
     "bundle": "cain42-proof-package-2026-09-24",
     "file": "gate_proofs.json",
     "sha256": "ff62511db0f759e00ecb6d7c8977798c839e0ce3d00396b49cae4168eb7d8c71"
    }
   ],
   "claim_id": "C42-MCPGATE-ENFORCES",
   "evidence_level": 5,
   "evidence_level_meaning": "reproducible public verification",
   "limits": "disposable cluster; the live MCPGate does not run this gate yet",
   "statement": "MCPGate lets a tool call run only with a PBFT-committed authorization bound to the exact action, scope, identity, security context, expiry, single use; 9 attack classes were blocked with signed denial proofs.",
   "status": "VERIFIED",
   "verification_method": "python3 verifiers/cain_proof_verify.py .   (see REPRODUCE.txt)"
  },
  {
   "artifacts": [
    {
     "bundle": "cain42-agent-proof-package-2026-09-24",
     "file": "manifest.json",
     "sha256": "9ccb5e68a06d51df8c5d02e2c0fd520a627ed09333523f750a8c6f5636a9677e"
    },
    {
     "bundle": "cain42-agent-proof-package-2026-09-24",
     "file": "agents.json",
     "sha256": "f10ea2027694d51543995f3668b087dd87585b2df2a9f4e92bb04d0b743e0998"
    }
   ],
   "claim_id": "C42-AGENTS-CANNOT-SELF-AUTHORIZE",
   "evidence_level": 5,
   "evidence_level_meaning": "reproducible public verification",
   "limits": "scripted agents, not LLMs; attestation SIMULATED; in-process",
   "statement": "Agents propose; only PBFT authorizes. Plan mutation, model update or tool swap after consensus forces reauthorization; undeclared actions, impersonation, replay, forged trajectories, delegation escalation and aggregate-policy (salami) attacks are blocked.",
   "status": "SIMULATED",
   "verification_method": "python3 verifiers/cain_proof_verify.py ."
  },
  {
   "artifacts": [
    {
     "bundle": "final-2026-09-24",
     "file": "CAIN42_FINAL_INVARIANTS_RUN.json",
     "sha256": "cdf56006ccb193195e9ccdf765620ff78be8b67a52e4894c881368874265d2e9"
    }
   ],
   "claim_id": "C42-INVARIANTS",
   "evidence_level": 4,
   "evidence_level_meaning": "adversarial verification",
   "limits": "executable tests, not formal verification; see each invariant's coverage/gap",
   "statement": "28 executable CAIN-42 invariants (I001-I028: no quorum -> no consensus -> no authorization -> no execution; agents, memory, DAG, delegation, trust and AI predictions cannot create authority; replay, expiry, substitution, tampering rejected) pass on the real code; 22 with full coverage, 6 partial with the gap named.",
   "status": "TESTED",
   "verification_method": "scripts/cain42_bft/cain42_invariants.py"
  },
  {
   "artifacts": [
    {
     "bundle": "final-2026-09-24",
     "file": "E6_TRAJECTORY_LAB.json",
     "sha256": "3ad3cadaf3e820adb78731ccfcefdd336bbc3467f0573f1be74ea9d22765c460"
    }
   ],
   "claim_id": "C42-1000-TRAJECTORIES",
   "evidence_level": 2,
   "evidence_level_meaning": "automated test evidence",
   "limits": "in-process; scripted agents",
   "statement": "1,000 agent trajectories (9 kinds incl. 380 attacks) all ended as expected; all 620 allowed actions carry complete, re-verified proof chains; a 1,000-step trajectory accepted 0 stale authorizations.",
   "status": "SIMULATED",
   "verification_method": "scripts/cain42_bft/agentic_trajectory_lab.py"
  },
  {
   "artifacts": [
    {
     "bundle": "final-2026-09-24",
     "file": "E5_ORDERING_FAIRNESS.json",
     "sha256": "32204ce929ad2c04451c67be344ced464c71e9372c551a9906692771819766e6"
    }
   ],
   "claim_id": "C42-ORDERING-FAIRNESS",
   "evidence_level": 2,
   "evidence_level_meaning": "automated test evidence",
   "limits": "position bias only; censorship and economic bias not measured",
   "statement": "DAG within-round order is seeded by committed PBFT history: validator-position bias measured before (chi-square 542) and after (1.75).",
   "status": "BENCHMARKED",
   "verification_method": "scripts/cain42_bft/dag_fairness_lab.py"
  },
  {
   "artifacts": [],
   "claim_id": "C42-LIVE-CLUSTER-EVO2",
   "evidence_level": 1,
   "evidence_level_meaning": "implementation evidence",
   "limits": "live cluster API is private; its first two decisions predate certificates",
   "statement": "The live cain-vc cluster runs the Evolution 2 engine (upgraded node by node, state preserved).",
   "status": "UNVERIFIED",
   "verification_method": "not publicly reachable"
  },
  {
   "artifacts": [],
   "claim_id": "C42-PRIVACY-FIREWALL",
   "evidence_level": 2,
   "evidence_level_meaning": "automated test evidence",
   "limits": "pattern-based; not a guarantee against every leak class",
   "statement": "Every published evidence bundle passes the public-evidence privacy firewall (keys, tokens, credentials, private IPs, internal URLs, server paths, source).",
   "status": "TESTED",
   "verification_method": "scripts/cain42_bft/public_evidence_firewall.py"
  },
  {
   "artifacts": [],
   "claim_id": "C42-INDEPENDENT-FAILURE-DOMAINS",
   "evidence_level": 0,
   "evidence_level_meaning": "claim only",
   "limits": "all nodes run on one host",
   "statement": "Consensus runs on independent failure domains.",
   "status": "NOT_IMPLEMENTED",
   "verification_method": "-"
  },
  {
   "artifacts": [],
   "claim_id": "C42-HARDWARE-ATTESTATION",
   "evidence_level": 0,
   "evidence_level_meaning": "claim only",
   "limits": "attestation fields are SIMULATED",
   "statement": "Hardware-backed attestation of nodes or agents.",
   "status": "NOT_IMPLEMENTED",
   "verification_method": "-"
  },
  {
   "artifacts": [],
   "claim_id": "C42-FORMAL-VERIFICATION",
   "evidence_level": 0,
   "evidence_level_meaning": "claim only",
   "limits": "bounded executable model checking only (not formal verification)",
   "statement": "Formal verification of the protocol.",
   "status": "NOT_IMPLEMENTED",
   "verification_method": "-"
  },
  {
   "artifacts": [
    {
     "bundle": "soak-72h-2026-09-25",
     "file": "verify_soak.py.txt",
     "sha256": "deed0270d115ba2cf509820cc7ec464fa835c76420971921558d4e14ac1e0cb4"
    },
    {
     "bundle": "soak-72h-2026-09-25",
     "file": "REPRODUCE.txt",
     "sha256": "afacde250be9afcf3112a6050b2eec0f67e0b77224ea985e57e6f844928c6d1d"
    }
   ],
   "claim_id": "C42-SOAK-72H",
   "evidence_level": 3,
   "evidence_level_meaning": "cryptographic verification",
   "limits": "verdict only after 72 h; one host; not the production cluster",
   "statement": "72-hour adversarial soak (dedicated 4-node cluster, fast path + DAG, crash/restart every 10 min): IN PROGRESS since 2026-09-25, hourly signed hash-chained checkpoints; verdict pending until it completes.",
   "status": "UNVERIFIED",
   "verification_method": "python3 verify_soak.py https://clawx.click/evidence/soak-72h-2026-09-25/  (checkpoints change hourly; they are hash-chained and signed themselves)"
  },
  {
   "artifacts": [],
   "claim_id": "C42-THIRD-PARTY-REVIEW",
   "evidence_level": 0,
   "evidence_level_meaning": "claim only",
   "limits": "none exists",
   "statement": "Independent third-party review or certification (SOC 2, ISO 27001, FedRAMP, ...).",
   "status": "NOT_IMPLEMENTED",
   "verification_method": "-"
  }
 ],
 "evidence_root_public_key_b64": "t1I4vBpOasgbBSWYTN2g7xL1En7qZ6lhgbt6n2OpeG8=",
 "git_commit": "1b28cf3d1902699aa66d9cf67eaf77108c968dec",
 "issued_at": "2026-09-25T00:11:39Z",
 "key_epoch": 1,
 "registry": "CAIN42/PUBLIC-CLAIMS/v1",
 "registry_digest": "5fa97598b1767134013db1155e21c41e5ff7bf19dab927d91e6fabc293233f31",
 "registry_locations": [
  "https://cainstudio.online/proof/bundle/claims/",
  "https://mcpgate.online/proof/bundle/claims/",
  "https://clawx.click/evidence/claims/"
 ],
 "signature_b64": "FziW/O1Tr5UhK7DAdts1W/LZnOQFLBCW7kuOHIiv9IIF4wSfSkJCVviQNLxUZx6e5m49jkNzpBjLsqyGIPY4CQ==",
 "sites": {
  "cainstudio.online": "/proof/bundle/",
  "clawx.click": "/evidence/",
  "mcpgate.online": "/proof/bundle/"
 }
}