{ "schema": "cain42.evolution12.proof.v1", "title": "CAIN-42 EVOLUTION-12-PROOF -- Perception, Evidence & Reality Governance Fabric", "generated_at": "2026-09-28T23:09:08+00:00", "commit": "3106ea9e1626871a44d15b879d1a864ca6846e6e", "bundle_name": "e12-perception-evidence-2026-09-28", "modules": { "e12_perception": { "path": "cain45/l5/perception.py", "sha256": "f58472148a85fba0877620c44589d539e3e79a0030e273799348bff6f838efc3" }, "e12_kernel_evidence_bindings": { "path": "cain45/l5/kernel.py", "sha256": "e70cc8cd43d1a1f2a32f3aba7733298aea0cda19495676662091ec04d380b673" }, "e12_intent_reuse": { "path": "cain45/l5/intent_governance.py", "sha256": "e313de56cddebf7ceb52a428b917b5b88d8ad59107ac59f828a5afcdfb429800" }, "e12_control_plane": { "path": "cain45/l5/__init__.py", "sha256": "64156f70c30ff27d6d150436f56ffbd8260f13caede908b4570d4281b96366c2" }, "e12_cli": { "path": "scripts/cain45/cain_agent_cli.py", "sha256": "54928f453b739cc6f8388a42c6b969ba01351ef9543af1995dc91168774edac3" } }, "tests": { "tests/test_cain42_e12_perception.py": "7a6b79733110d193bbc19187dcea8e9e0a7c5d29eb85b2686188f7db82b67378", "tests/test_cain42_e12_adversarial.py": "8a4a04346b438c1932f9c78c836bb8402069a526fbe7ec124640327350fdef2f", "tests/test_cain42_e12_end_to_end.py": "8774e10f9511c03f094af836f018c85f0266cda2d14cfcbd3f562604b03305f0" }, "test_run": { "command": "python3 -m pytest tests/test_cain42_e12_perception.py tests/test_cain42_e12_adversarial.py tests/test_cain42_e12_end_to_end.py -q", "summary": "============================== 36 passed in 0.92s ==============================", "passed": 36, "failed": 0, "returncode": 0, "transcript_tail": [ "============================= test session starts ==============================", "collected 36 items", "", "tests/test_cain42_e12_perception.py ........................... [ 75%]", "tests/test_cain42_e12_adversarial.py ....... [ 94%]", "tests/test_cain42_e12_end_to_end.py .. [100%]", "", "============================== 36 passed in 0.92s ==============================" ] }, "invariants": { "evolution": 12, "fabric": "cain42.l5.perception", "checks": [ { "id": "P1", "invariant": "OBSERVATION IS NOT AUTHORITY", "holds": true, "detail": "OBSERVATION" }, { "id": "P2", "invariant": "INFERENCE IS NOT OBSERVATION", "holds": true, "detail": "inference is not fact" }, { "id": "P3", "invariant": "MEMORY IS NOT PROOF", "holds": true, "detail": { "schema": "cain42.e12.memory-class.v1", "memory_class": "CLAIM", "content_digest": "14ca668a36ccbfe78d386ae45fea6ceab987b813b54d971b9901cf824a2f919f", "authority": "NONE", "grants_authority": false, "note": "memory is evidence or claim, not authorization" } }, { "id": "P4", "invariant": "MODEL ASSERTION IS NOT EXTERNAL FACT", "holds": true, "detail": { "schema": "cain42.e12.model-assertion.v1", "assertion_id": "a1", "model_id": "m", "agent_id": "agent", "trajectory_id": "t", "input_evidence_ids": [ "e1" ], "generation_timestamp": 0.0, "model_runtime_digest": "runtime", "confidence": 0.9, "reasoning_artifact_reference": "", "evidence_class": "MODEL_ASSERTION", "is_external_fact": false, "authority": "NONE", "note": "model assertions are not external facts; no private chain-of-thought is stored" } }, { "id": "P5", "invariant": "UNKNOWN CANNOT MINT TRUST", "holds": true, "detail": "refused" }, { "id": "P6", "invariant": "UNVERIFIED SOURCE CANNOT GAIN ELEVATED AUTHORITY", "holds": true, "detail": [ "SOURCE_TYPE_NOT_AUTHORIZED:web_resource" ] }, { "id": "P7", "invariant": "CORRELATED SOURCES ARE NOT INDEPENDENT", "holds": true, "detail": { "schema": "cain42.e12.corroboration.v1", "observations": 100, "independent_sources": 1, "correlated_sources": 99, "principals": 1, "lineages": 1, "state": "CORRELATED", "authority": "NONE", "note": "correlated sources are not independent" } }, { "id": "P8", "invariant": "STALE EVIDENCE CANNOT SILENTLY AUTHORIZE", "holds": true, "detail": { "authorized": false, "state": "stale", "reason": "STALE_EVIDENCE_CANNOT_AUTHORIZE", "age": 1000.0, "authority": "NONE" } }, { "id": "P9", "invariant": "EXPIRED EVIDENCE CANNOT AUTHORIZE", "holds": true, "detail": { "authorized": false, "state": "expired", "reason": "EVIDENCE_EXPIRED", "authority": "NONE" } }, { "id": "P10", "invariant": "REVOKED EVIDENCE INVALIDATES DEPENDENCIES", "holds": true, "detail": { "schema": "cain42.e12.evidence-blast-radius.v1", "revoked_evidence": "e1", "dependent_claims": [ "claim:1" ], "dependent_intents": [ "int1" ], "invalidated_tokens": [ "tok1" ], "action": "INVALIDATE_DEPENDENCIES", "authority": "NONE" } }, { "id": "P11", "invariant": "MATERIAL CONFLICT CANNOT BE SILENTLY RESOLVED", "holds": true, "detail": "BLOCK" }, { "id": "P12", "invariant": "EVIDENCE AUTHORITY IS TARGET-SPECIFIC", "holds": true, "detail": { "ok": true, "bad": [ "SOURCE_TYPE_NOT_AUTHORIZED:database" ] } }, { "id": "P13", "invariant": "TOOL OUTPUT IS DATA UNLESS EXPLICITLY AUTHORIZED", "holds": true, "detail": { "schema": "cain42.e12.retrieved-content.v1", "content_digest": "7b56a2a895a8b6eef01b32f7fba759ba362658b3d2624c6a1edf356a0f7878cd", "treated_as": "DATA", "policy_status": "DATA", "authority": "NONE", "promotes_to_policy": false, "promotes_to_authority": false, "known_injection": true, "elements": { "FACT": false, "CLAIM": false, "INSTRUCTION": true, "EXECUTABLE": false, "POLICY_LOOKING": true, "AUTHORIZATION_LOOKING": false }, "note": "retrieved content cannot change policy; instruction-shaped content stays data" } }, { "id": "P14", "invariant": "RETRIEVED CONTENT CANNOT CHANGE POLICY", "holds": true, "detail": { "schema": "cain42.e12.retrieved-content.v1", "content_digest": "37dc3f8d38a42bd3d46b6ead3625106b60e91caedb41ddf8b9750f73d868c31b", "treated_as": "DATA", "policy_status": "DATA", "authority": "NONE", "promotes_to_policy": false, "promotes_to_authority": false, "known_injection": false, "elements": { "FACT": false, "CLAIM": false, "INSTRUCTION": false, "EXECUTABLE": false, "POLICY_LOOKING": true, "AUTHORIZATION_LOOKING": false }, "note": "retrieved content cannot change policy; instruction-shaped content stays data" } }, { "id": "P15", "invariant": "EVIDENCE CHANGE REQUIRES REEVALUATION", "holds": true, "detail": { "intent_id": "int1", "evidence_ids": [ "e1" ], "material": true, "evidence_root": "r1", "digest": "51e63206291e18fcc7ec7aac8189320a13346b5a0016869f1d424aa0bf8157b4", "authority": "NONE" } }, { "id": "P16", "invariant": "INTENT MUST DECLARE MATERIAL EVIDENCE DEPENDENCIES", "holds": true, "detail": "binding requires declared evidence" }, { "id": "P17", "invariant": "ACTION AUTHORIZATION MUST BIND REQUIRED EVIDENCE", "holds": true, "detail": [ "EVIDENCE_SET_CHANGED" ] }, { "id": "P18", "invariant": "MODEL-GENERATED ASSERTIONS REQUIRE PROVENANCE", "holds": true, "detail": "refused" }, { "id": "P19", "invariant": "INTEGRITY DOES NOT EQUAL TRUTH", "holds": true, "detail": { "schema": "cain42.e12.evidence-integrity.v1", "media_type": "application/json", "content_digest": "d", "integrity": "VERIFIED", "authenticity": "UNKNOWN", "provenance": "UNKNOWN", "semantic_correctness": "UNKNOWN", "authority": "NONE", "note": "integrity does not equal truth" } }, { "id": "P20", "invariant": "UNKNOWN MUST REMAIN UNKNOWN", "holds": true, "detail": "refused" } ], "failed": [], "all_hold": true, "checked": 20 }, "attack_bench": { "bench": "CAIN-42-E12-Evidence-Bench", "attacks": { "web_prompt_injection": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.retrieved-content.v1", "content_digest": "7b56a2a895a8b6eef01b32f7fba759ba362658b3d2624c6a1edf356a0f7878cd", "treated_as": "DATA", "policy_status": "DATA", "authority": "NONE", "promotes_to_policy": false, "promotes_to_authority": false, "known_injection": true, "elements": { "FACT": false, "CLAIM": false, "INSTRUCTION": true, "EXECUTABLE": false, "POLICY_LOOKING": true, "AUTHORIZATION_LOOKING": false }, "note": "retrieved content cannot change policy; instruction-shaped content stays data" } }, "retrieval_poisoning": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.retrieved-content.v1", "content_digest": "8cdb35af1a65fb789ce40d1994d2cb0d35d5c01dff151848b8c08d07f109fe4d", "treated_as": "DATA", "policy_status": "DATA", "authority": "NONE", "promotes_to_policy": false, "promotes_to_authority": false, "known_injection": true, "elements": { "FACT": false, "CLAIM": false, "INSTRUCTION": true, "EXECUTABLE": false, "POLICY_LOOKING": false, "AUTHORIZATION_LOOKING": false }, "note": "retrieved content cannot change policy; instruction-shaped content stays data" } }, "document_instruction_injection": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.retrieved-content.v1", "content_digest": "4048e428236305ca7fca354c622090e6d76362047f5f7a3d2222a960417bda36", "treated_as": "DATA", "policy_status": "DATA", "authority": "NONE", "promotes_to_policy": false, "promotes_to_authority": false, "known_injection": true, "elements": { "FACT": false, "CLAIM": false, "INSTRUCTION": true, "EXECUTABLE": false, "POLICY_LOOKING": false, "AUTHORIZATION_LOOKING": true }, "note": "retrieved content cannot change policy; instruction-shaped content stays data" } }, "browser_content_injection": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.retrieved-content.v1", "content_digest": "06bee7b1c47d231906429c33cc27dddcb8bbe45ee732e7fe238e501fdff4bfc1", "treated_as": "DATA", "policy_status": "DATA", "authority": "NONE", "promotes_to_policy": false, "promotes_to_authority": false, "known_injection": true, "elements": { "FACT": false, "CLAIM": false, "INSTRUCTION": true, "EXECUTABLE": false, "POLICY_LOOKING": false, "AUTHORIZATION_LOOKING": false }, "note": "retrieved content cannot change policy; instruction-shaped content stays data" } }, "memory_poisoning": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.memory-class.v1", "memory_class": "CLAIM", "content_digest": "14ca668a36ccbfe78d386ae45fea6ceab987b813b54d971b9901cf824a2f919f", "authority": "NONE", "grants_authority": false, "note": "memory is evidence or claim, not authorization" } }, "source_spoofing": { "contained": true, "state": "CONTAINED", "evidence": { "target": "identity_verification", "authorized": false, "reasons": [ "SOURCE_TYPE_NOT_AUTHORIZED:web_resource" ], "minimum_epistemic": "ATTESTED", "epistemic_status": "UNKNOWN", "authority": "NONE" } }, "source_substitution": { "contained": true, "state": "CONTAINED", "evidence": { "target": "identity_verification", "authorized": false, "reasons": [ "SOURCE_TYPE_NOT_AUTHORIZED:external_service" ], "minimum_epistemic": "ATTESTED", "epistemic_status": "UNKNOWN", "authority": "NONE" } }, "stale_evidence": { "contained": true, "state": "CONTAINED", "evidence": { "authorized": false, "state": "stale", "reason": "STALE_EVIDENCE_CANNOT_AUTHORIZE", "age": 1000.0, "authority": "NONE" } }, "expired_evidence": { "contained": true, "state": "CONTAINED", "evidence": "expired" }, "future_dated_evidence": { "contained": true, "state": "CONTAINED", "evidence": { "state": "clock_conflicted", "authority": "NONE" } }, "timestamp_manipulation": { "contained": true, "state": "CONTAINED", "evidence": { "state": "clock_conflicted", "authority": "NONE" } }, "replayed_evidence": { "contained": true, "state": "CONTAINED", "evidence": { "authorized": false, "state": "superseded", "reason": "SUPERSEDED_EVIDENCE_CANNOT_AUTHORIZE", "superseded_by": "e2", "authority": "NONE" } }, "superseded_evidence": { "contained": true, "state": "CONTAINED", "evidence": { "authorized": false, "state": "superseded", "reason": "SUPERSEDED_EVIDENCE_CANNOT_AUTHORIZE", "superseded_by": "e2", "authority": "NONE" } }, "hash_valid_false_evidence": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.evidence-integrity.v1", "media_type": "application/json", "content_digest": "d", "integrity": "VERIFIED", "authenticity": "UNKNOWN", "provenance": "UNKNOWN", "semantic_correctness": "UNKNOWN", "authority": "NONE", "note": "integrity does not equal truth" } }, "correlated_source_sybil": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.corroboration.v1", "observations": 50, "independent_sources": 1, "correlated_sources": 49, "principals": 1, "lineages": 1, "state": "CORRELATED", "authority": "NONE", "note": "correlated sources are not independent" } }, "fake_corroboration": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.corroboration.v1", "observations": 50, "independent_sources": 1, "correlated_sources": 49, "principals": 1, "lineages": 1, "state": "CORRELATED", "authority": "NONE", "note": "correlated sources are not independent" } }, "agent_generated_false_evidence": { "contained": true, "state": "CONTAINED", "evidence": "model assertion is not external fact" }, "model_assertion_provenance": { "contained": true, "state": "CONTAINED", "evidence": { "enforced": "model_id/agent_id/trajectory_id/model_runtime_digest required" } }, "tool_output_authority_injection": { "contained": true, "state": "CONTAINED", "evidence": "tool output is data" }, "cross_agent_evidence_laundering": { "contained": true, "state": "CONTAINED", "evidence": "correlated agents are not independent" }, "collective_evidence_laundering": { "contained": true, "state": "CONTAINED", "evidence": "CORRELATED" }, "conflicting_database_records": { "contained": true, "state": "CONTAINED", "evidence": { "conflict": true, "outcome": "BLOCK", "dimensions": { "source_quality_a": 0.6, "source_quality_b": 0.6, "integrity_a": "ATTESTED", "integrity_b": "ATTESTED", "freshness_a": "fresh", "freshness_b": "fresh", "corroboration_a": 0, "corroboration_b": 0, "same_trust_domain": true, "independent": true }, "a": "a", "b": "b", "authority": "NONE", "note": "a material conflict is never silently resolved" } }, "conflicting_api_responses": { "contained": true, "state": "CONTAINED", "evidence": { "conflict": true, "outcome": "BLOCK", "dimensions": { "source_quality_a": 0.6, "source_quality_b": 0.6, "integrity_a": "ATTESTED", "integrity_b": "ATTESTED", "freshness_a": "fresh", "freshness_b": "fresh", "corroboration_a": 0, "corroboration_b": 0, "same_trust_domain": true, "independent": true }, "a": "a", "b": "b", "authority": "NONE", "note": "a material conflict is never silently resolved" } }, "multimodal_provenance_spoofing": { "contained": true, "state": "CONTAINED", "evidence": "valid hash does not prove origin" }, "revoked_source": { "contained": true, "state": "CONTAINED", "evidence": [ { "evidence_id": "e1", "reason": "source_compromise", "at": 1.0, "authority": "NONE" } ] }, "revoked_evidence": { "contained": true, "state": "CONTAINED", "evidence": [ { "evidence_id": "e1", "reason": "source_compromise", "at": 1.0, "authority": "NONE" } ] }, "revoked_evidence_invalidates_dependencies": { "contained": true, "state": "CONTAINED", "evidence": "dependencies invalidated" }, "evidence_to_intent_substitution": { "contained": true, "state": "CONTAINED", "evidence": { "intent_id": "i", "evidence_ids": [ "e1" ], "material": true, "evidence_root": "r1", "digest": "d7fe9aeb7d3e82e013e4a70e5df5ace10ecc13fad166278846c1913df28b7705", "authority": "NONE" } }, "intent_to_action_substitution": { "contained": true, "state": "CONTAINED", "evidence": [ "EVIDENCE_SET_CHANGED" ] }, "reality_drift": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.reality-drift.v1", "drift": true, "material": true, "findings": [ { "field": "balance", "expected": 10000, "observed": 2000, "material": true } ], "action": "REALITY_DRIFT_REQUIRES_REEVALUATION", "authority": "NONE" } }, "policy_evidence_confusion": { "contained": true, "state": "CONTAINED", "evidence": { "schema": "cain42.e12.retrieved-content.v1", "content_digest": "e0eb2fe6ae43f4cc5a48557adea16837b0e09eafa558b856d8a3beba30638b50", "treated_as": "DATA", "policy_status": "DATA", "authority": "NONE", "promotes_to_policy": false, "promotes_to_authority": false, "known_injection": false, "elements": { "FACT": false, "CLAIM": false, "INSTRUCTION": false, "EXECUTABLE": false, "POLICY_LOOKING": true, "AUTHORIZATION_LOOKING": false }, "note": "retrieved content cannot change policy; instruction-shaped content stays data" } }, "unknown_to_trusted_escalation": { "contained": true, "state": "CONTAINED", "evidence": "UNKNOWN -> CORROBORATED refused" } }, "contained": 32, "total": 32, "all_contained": true, "authority": "NONE", "note": "contained = unauthorized elevation prevented or the governed state forced" }, "schemas": { "ObservationEnvelope": { "fields": [ "observation_id", "source_id", "source_type", "content", "observed_at", "source_provenance", "content_type", "received_at", "valid_from", "valid_until", "origin", "issuer", "chain_of_custody", "integrity_status", "authenticity_status", "freshness_status", "epistemic_status", "confidence", "corroboration_state", "conflict_state", "trust_domain", "authorization_scope", "sensitivity", "simulation_status", "evidence_class", "parent_observation", "supersedes" ], "canonical": true }, "SourceAttestation": { "fields": [ "source_id", "source_type", "identity_status", "passport_digest", "trust_domain", "integrity_status", "authority", "provenance" ], "canonical": true }, "EvidenceObject": { "fields": [ "evidence_id", "observation_ids", "source_ids", "content_digest", "provenance_root", "integrity_proof", "created_at", "epistemic_status", "temporal_validity", "corroboration_score", "conflict_set", "confidence", "authorization_relevance", "decision_targets", "expires_at", "superseded_by", "evidence_class" ], "canonical": true }, "EvidenceIntegrity": { "fields": [ "content_digest", "integrity", "authenticity", "provenance", "semantic_correctness", "media_type" ], "canonical": true }, "ModelAssertion": { "fields": [ "assertion_id", "model_id", "agent_id", "trajectory_id", "input_evidence_ids", "generation_timestamp", "model_runtime_digest", "confidence", "reasoning_artifact_reference", "evidence_class", "authority", "is_external_fact" ], "canonical": true }, "IntentEvidenceBinding": { "fields": [ "intent_id", "evidence_ids", "material", "evidence_root" ], "canonical": true } }, "limitations": [ "TESTED library: the perception/evidence fabric is part of the L5 kernel library on the operator host; it is not a hosted service and it runs no agents.", "Attribution and corroboration counts are EVIDENCE, not proof of truth: a valid hash proves bytes did not change, never that the bytes are truthful.", "Prompt-injection detection reuses the E11 pattern-based classifier; it is not perfect semantic detection.", "Independence is counted from principal and lineage; a source that also fabricates distinct lineages is not detected.", "Multimodal handling validates integrity/authenticity/provenance metadata; it does not perform semantic authenticity of image/audio/video content.", "Attestation is over software/configuration digests, NOT hardware attestation.", "No third party has reviewed this bundle; the clean-room verifier shares no CAIN imports but was written by the same operator.", "Performance numbers are a single in-process run on the build host with the stated workload and graph size." ], "performance": { "conditions": { "hardware": { "host": "vultr", "machine": "x86_64", "processor": "", "cpu_count": 2 }, "software": { "python": "3.14.4", "os": "Linux-7.0.0-30-generic-x86_64-with-glibc2.43" }, "graph_size": { "small": 5, "large": 500 }, "concurrency": 1, "methodology": "single process, in-process library calls, objects pre-built once, each case timed in a loop of 2000; warm state", "unit": "microseconds", "samples_per_case": 2000 }, "results": { "observation_ingestion": { "p50_us": 21.921, "p95_us": 48.682, "p99_us": 1666.024, "max_us": 13874.52, "mean_us": 71.28, "samples": 2000 }, "provenance_validation": { "p50_us": 11.803, "p95_us": 20.208, "p99_us": 410.574, "max_us": 9086.501, "mean_us": 44.065, "samples": 2000 }, "evidence_graph_lookup": { "p50_us": 0.889, "p95_us": 1.08, "p99_us": 1.552, "max_us": 46.931, "mean_us": 0.98, "samples": 2000 }, "corroboration_500_sources": { "p50_us": 66.893, "p95_us": 163.064, "p99_us": 878.553, "max_us": 17280.026, "mean_us": 115.859, "samples": 2000 }, "conflict_evaluation": { "p50_us": 15.599, "p95_us": 18.959, "p99_us": 51.916, "max_us": 525.123, "mean_us": 17.616, "samples": 2000 }, "authorization_impact": { "p50_us": 0.569, "p95_us": 0.601, "p99_us": 0.741, "max_us": 11.101, "mean_us": 0.591, "samples": 2000 }, "memory_evidence_resolution": { "p50_us": 2.827, "p95_us": 3.282, "p99_us": 4.259, "max_us": 1306.142, "mean_us": 3.771, "samples": 2000 }, "large_evidence_graph": { "p50_us": 11.091, "p95_us": 13.521, "p99_us": 48.546, "max_us": 1957.189, "mean_us": 14.642, "samples": 2000 } }, "note": "single host, single operator, warm, in-process; not a production benchmark; no extrapolation" }, "environment_class": "operator host, single process, pre-production", "laws": [ "NO EVIDENCE -> NO TRUST", "OBSERVATION != FACT", "INFERENCE != OBSERVATION", "EVIDENCE != AUTHORITY", "MEMORY IS NOT AUTHORITY", "UNCERTAINTY MUST REMAIN UNCERTAINTY", "UNKNOWN MUST REMAIN UNKNOWN", "INTEGRITY DOES NOT EQUAL TRUTH" ], "evidence_level": "TESTED", "signer_public_key_b64": "1iyF9CRTeBlwkKFhjqRjldDJQ7VscfcSK7MaWofi0f0=", "signature_b64": "9s6qEw9XaeZDY9XnnH68+P2tbWHgjCwr31PpsVbc7iuRhf/VYskl7DUJ605nIDxBCi2A3B/OUQP/aM/8tC7YBA==" }