{ "schema": "cain42.cag_l5.hosted_live_run.v1", "generated": "2026-09-28T12:07:19Z", "what": "CAIN_SYSTEM_GOVERNOR=1 on the production gateway; operator self-test tenant; scripted agent", "governance_public_key": "S85EQLBAISkyqAUZZ7Q3M38p17cE4TfLhCIDRQ2kQsY=", "registration": { "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "governance_key": "S85EQLBAISkyqAUZZ7Q3M38p17cE4TfLhCIDRQ2kQsY=", "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700", "certification": { "verified": true, "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "request_id": "cagl5-e386ed9d9265-51ba7fb100b6d715-4b810f05", "reason": null, "latency_ms": 2577.4, "attempts": [ "committed" ], "at": 1790597239.677606 } }, "emergency_recovery_http": { "one_operator": 400, "two_operators": 200 }, "cases": [ { "case": "A in-scope read by the primary agent", "site": "https://cainstudio.online", "expected_allowed": true, "allowed": true, "decision": "ALLOW", "reason": "Authorized under deterministic local baseline (action is allowlisted).", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "ALLOW", "signed_decision": { "decision": "ALLOW", "reasons": [], "step_up": [], "blast_radius": "LOCAL", "reversibility": "REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "56bbeaea24eae91bf28fab4cba59632c805baa2a0a3c72c60ef4fc1e4a36b3fe", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.7467678, "commitment": "7b1be1e4e900e0ac52c9f56c0f41edadefb955c028a2929fffa5bb2d21c98c92" }, "signature": "7WDZgy3LrMSa4d8nh5qMOeZPL3vHOVcWA32qeEe7b4DCo1GTYZ90psET8xinb5bk7K/1E7QQsYFs49RtMXzfCg==", "commitment": { "agent_id": "urn:cain:identity:agent:cagl5-selftest-primary", "tool_id": "mcp:selftest-db", "capability": "READ", "resource": "db:selftest/orders", "parameters_hash": "0564400dd6697e6fb5a429753b291e586a1c067e757a38377b7d64d80101b399", "authority_hash": "c230f549948336408d12f708c2521557c68baa3fd471b53abf7fffb41dc83487", "policy_version": "policy-selftest-v1", "trajectory_id": "tr_b0a0fe473776f96e3d84", "context_hash": "selftest-ctx", "expected_effect_hash": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b", "nonce": "cd1996071e7d9585", "signature": "PO0z6tnE4WpfvVvNc7bbtfasri+W9Ac4Qb1LUOtj1AKjZ/QYPHoCTckrezaxCt/nJCAuiuI2jLpw6Se1vW6KDQ==" }, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 54.4, "as_expected": true }, { "case": "A in-scope read by the primary agent", "site": "https://mcpgate.online", "expected_allowed": true, "allowed": true, "decision": "ALLOW", "reason": "Fast-path certificate validated.", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "ALLOW", "signed_decision": { "decision": "ALLOW", "reasons": [], "step_up": [], "blast_radius": "LOCAL", "reversibility": "REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "56bbeaea24eae91bf28fab4cba59632c805baa2a0a3c72c60ef4fc1e4a36b3fe", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.7783203, "commitment": "4fc1c3816a2d2af3d9d8b70f2ca8a9d52c6d1b7929d972639b51b88881d1bcdf" }, "signature": "C7EQfgoIRRFvPygN6IYM0COlPKgWxY/wCTUyy8sB7aDuXJrErFjy1PAhS3KPEcLscE+clUUkJhFMS2DZfim2Dg==", "commitment": { "agent_id": "urn:cain:identity:agent:cagl5-selftest-primary", "tool_id": "mcp:selftest-db", "capability": "READ", "resource": "db:selftest/orders", "parameters_hash": "0564400dd6697e6fb5a429753b291e586a1c067e757a38377b7d64d80101b399", "authority_hash": "c230f549948336408d12f708c2521557c68baa3fd471b53abf7fffb41dc83487", "policy_version": "policy-selftest-v1", "trajectory_id": "tr_b0a0fe473776f96e3d84", "context_hash": "selftest-ctx", "expected_effect_hash": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b", "nonce": "04e2e432bbd66cae", "signature": "1bumrncGBQgtLJ4k0gDczjQTciBsH9YH/XAINLHcXlLvXmLGuw2jlHgvmT10cNosBFLTIuvc0r89WjLaNOqiBQ==" }, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 30.8, "as_expected": true }, { "case": "A in-scope read by the primary agent", "site": "https://clawx.click", "expected_allowed": true, "allowed": true, "decision": "ALLOW", "reason": "Fast-path certificate validated.", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "ALLOW", "signed_decision": { "decision": "ALLOW", "reasons": [], "step_up": [], "blast_radius": "LOCAL", "reversibility": "REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "56bbeaea24eae91bf28fab4cba59632c805baa2a0a3c72c60ef4fc1e4a36b3fe", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.8096015, "commitment": "4b54b61bb38f9ce9b4dfe8ac4fc93a3aae3ade3446f610b5dabdee4c62efbc59" }, "signature": "dlNZX333vLfVy2p9ZZO0++jzA1hC/7bGTYJwj9nR+JGvNNWewK2OmEpNp240wt9j4IsfoN/oXV1ro15Qfd/PDg==", "commitment": { "agent_id": "urn:cain:identity:agent:cagl5-selftest-primary", "tool_id": "mcp:selftest-db", "capability": "READ", "resource": "db:selftest/orders", "parameters_hash": "0564400dd6697e6fb5a429753b291e586a1c067e757a38377b7d64d80101b399", "authority_hash": "c230f549948336408d12f708c2521557c68baa3fd471b53abf7fffb41dc83487", "policy_version": "policy-selftest-v1", "trajectory_id": "tr_b0a0fe473776f96e3d84", "context_hash": "selftest-ctx", "expected_effect_hash": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b", "nonce": "9a530d59b90311d6", "signature": "gU9kw9x5FTtFzQ8TSjWsiS5a0NsbsmVnO0D25AhuzZI/lwYHeyFD3/CZ/ZJ/bgYVu++ufvFNOxkpfOfktRsCCA==" }, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 30.6, "as_expected": true }, { "case": "B unregistered tenant", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAG-L5 system governance: NO_GOVERNED_SYSTEM", "system_governance": { "applied": true, "decision": "DENY", "reasons": [ "NO_GOVERNED_SYSTEM" ] }, "l5_decision": null, "signed_decision": null, "signature": null, "commitment": null, "state_certification": null, "client_latency_ms": 7.0, "as_expected": true }, { "case": "C unsigned request", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAG-L5 system governance: AGENT_SIGNATURE_MISSING", "system_governance": { "applied": true, "decision": "DENY", "reasons": [ "AGENT_SIGNATURE_MISSING" ] }, "l5_decision": null, "signed_decision": null, "signature": null, "commitment": null, "state_certification": null, "client_latency_ms": 5.6, "as_expected": true }, { "case": "D signed with the subagent's key while claiming the primary", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAG-L5 system governance: AGENT_SIGNATURE_INVALID", "system_governance": { "applied": true, "decision": "DENY", "reasons": [ "AGENT_SIGNATURE_INVALID" ] }, "l5_decision": null, "signed_decision": null, "signature": null, "commitment": null, "state_certification": null, "client_latency_ms": 5.6, "as_expected": true }, { "case": "E replayed request", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAG-L5 system governance: AGENT_REQUEST_REPLAY", "system_governance": { "applied": true, "decision": "DENY", "reasons": [ "AGENT_REQUEST_REPLAY" ] }, "l5_decision": null, "signed_decision": null, "signature": null, "commitment": null, "state_certification": null, "client_latency_ms": 6.8, "as_expected": true }, { "case": "F outside the system's authority (agent holds it, system does not)", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAIN-42 L5 governance: OUTSIDE_SYSTEM_AUTHORITY", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "DENY", "signed_decision": { "decision": "DENY", "reasons": [ "OUTSIDE_SYSTEM_AUTHORITY" ], "step_up": [], "blast_radius": "LOCAL", "reversibility": "REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "7ce9206253a7f7221b9c28d4c15e4f1deb3bf321b76ab45497fb4bc7e8ec23ee", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.894332, "commitment": "" }, "signature": "dOh+hnqGPF5JZwhSe1yt1LFxLsitOLnsmX/nH+y3iWgwOR5JCWRl/HRlyqy23evoDj1hA1YFA1La+YhfTBDtBQ==", "commitment": null, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 12.0, "as_expected": true }, { "case": "G model swapped under the same agent id", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAIN-42 L5 governance: MODEL_CHANGED_REASSESS", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "REASSESS", "signed_decision": { "decision": "REASSESS", "reasons": [ "MODEL_CHANGED_REASSESS" ], "step_up": [], "blast_radius": "LOCAL", "reversibility": "REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "7d88bb553f2df5091e90cd90f09b7eebefe00e53b8d513d1dca62b0045dbb5f4", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.906322, "commitment": "" }, "signature": "dH+8NhZ0DbzT5pGA8gXGO/nf5l/wWd8LNwE1sSJojfNPiKZWEL9I+E1O0tScWO+oqIUVWiCspreA7yFaV1yIAg==", "commitment": null, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 11.9, "as_expected": true }, { "case": "H subagent attempts WRITE", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAIN-42 L5 governance: OUTSIDE_AGENT_AUTHORITY,ROLE_NOT_PERMITTED_ON_RESOURCE", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "DENY", "signed_decision": { "decision": "DENY", "reasons": [ "OUTSIDE_AGENT_AUTHORITY", "ROLE_NOT_PERMITTED_ON_RESOURCE" ], "step_up": [], "blast_radius": "LOCAL", "reversibility": "PARTIALLY_REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "c435f14c7c95ffcbab464874e9ded94c3ae3e5d8d8771020cf8932132fbe2c5d", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.9188247, "commitment": "" }, "signature": "Nb7cwHZbptYhJpNGpxMEL7wFaWUsfgK+KoQbCs6fvolbqDGpCpubD1eQGwKPD3ZyoJXJpNF22IYgVYPglL92CQ==", "commitment": null, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 12.3, "as_expected": true }, { "case": "I tool not in the governed manifest", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "REQUIRE_APPROVAL", "reason": "Unknown action 'shell_exec': not on the allowlist (default-deny). Add it to guard(allow=[...]) or CAIN_ALLOWED_ACTIONS, or approve it.", "system_governance": { "applied": true, "consulted": false, "note": "the MCPGate layer refused first; the system layer was not reached" }, "l5_decision": null, "signed_decision": null, "signature": null, "commitment": null, "state_certification": null, "client_latency_ms": 11.1, "as_expected": true }, { "case": "J emergency execution freeze", "site": "https://cainstudio.online", "expected_allowed": false, "allowed": false, "decision": "DENIED", "reason": "CAIN-42 L5 governance: EMERGENCY:MCP_EXECUTION_FREEZE", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "PAUSE", "signed_decision": { "decision": "PAUSE", "reasons": [ "EMERGENCY:MCP_EXECUTION_FREEZE" ], "step_up": [], "blast_radius": "LOCAL", "reversibility": "REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "56bbeaea24eae91bf28fab4cba59632c805baa2a0a3c72c60ef4fc1e4a36b3fe", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.948523, "commitment": "" }, "signature": "0eSi9DtUezbGukzFbGJla+fyy2Y3yq5Leasoz5409DW4bLX8cIosNfgrJjQNKZr8kCJ9QuEOktdnuLris0d6Ag==", "commitment": null, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 12.0, "as_expected": true }, { "case": "K after two-operator recovery", "site": "https://cainstudio.online", "expected_allowed": true, "allowed": true, "decision": "ALLOW", "reason": "Fast-path certificate validated.", "system_governance": { "applied": true, "consulted": true, "note": null }, "l5_decision": "ALLOW", "signed_decision": { "decision": "ALLOW", "reasons": [], "step_up": [], "blast_radius": "LOCAL", "reversibility": "REVERSIBLE", "policy": { "effect": "ALLOW", "reason": "", "rule": "pr_0120041c" }, "request_hash": "56bbeaea24eae91bf28fab4cba59632c805baa2a0a3c72c60ef4fc1e4a36b3fe", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "at": 1790597239.9733155, "commitment": "0f228cc6e18646cf8775260143dbfb6f9c52d234b8d9d804c0eb6dff3ee8e1ca" }, "signature": "RaNDUsrrQRje23MVwL7zzJ9NmC3i5bfAXnIC6cmnVxEZTtM5/CqxnSMv0Hoj/7EPui2zoLl5jJbYyy7rJ5m1Bw==", "commitment": { "agent_id": "urn:cain:identity:agent:cagl5-selftest-primary", "tool_id": "mcp:selftest-db", "capability": "READ", "resource": "db:selftest/orders", "parameters_hash": "0564400dd6697e6fb5a429753b291e586a1c067e757a38377b7d64d80101b399", "authority_hash": "c230f549948336408d12f708c2521557c68baa3fd471b53abf7fffb41dc83487", "policy_version": "policy-selftest-v1", "trajectory_id": "tr_b0a0fe473776f96e3d84", "context_hash": "selftest-ctx", "expected_effect_hash": "74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b", "nonce": "5ce6b44820aeeb62", "signature": "MSLRtd0FxW7fcbVgyAtprhkZQJgvAqFOXpyChaj0V9C2MtS6UdTDZxep89rqVQ7Dmrib+223lPMxDCj6Z6+/BA==" }, "state_certification": { "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700" }, "client_latency_ms": 13.1, "as_expected": true } ], "all_as_expected": true, "decision_signatures_valid": "8/8", "event_chain": { "events": 18, "verifies": true }, "status_at_end": { "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700", "certification": { "verified": true, "cluster_id": "cain-mr-01", "sequence": 20167, "certificate_hash": "d5df95dafb338754bcba4516dfd09cdc0c69ba8ee24949b1b7d89668ebd177a8", "signers": [ "cain-mr-node-1", "cain-mr-node-2", "cain-mr-node-4" ], "quorum": 3, "state_digest": "51ba7fb100b6d715dfe439c1e20e906a899894c32f91a39a2e9b8535b9495700", "system_digest": "4b810f05b43732025cc90e66d871df7451454fc8fee54b9d22069aede26900ef", "request_id": "cagl5-e386ed9d9265-51ba7fb100b6d715-4b810f05", "reason": null, "latency_ms": 2577.4, "attempts": [ "committed" ], "at": 1790597239.677606 }, "events": 18 }, "limits": [ "scripted self-test agent, not a customer or an LLM", "verdict endpoint: the gateway decides, the caller's MCPGate/SystemGate executes", "trajectories/leases are in memory (<=1 h)" ] }