{
  "schema": "cain42.evolution13.proof.v1",
  "title": "CAIN-42 EVOLUTION-13-PROOF -- Governed Cognition & Decision Integrity Fabric",
  "generated_at": "2026-09-28T23:09:16+00:00",
  "commit": "3106ea9e1626871a44d15b879d1a864ca6846e6e",
  "bundle_name": "e13-decision-integrity-2026-09-28",
  "modules": {
    "e13_decision": {
      "path": "cain45/l5/decision.py",
      "sha256": "7a5d963b93fbba0d3ddc4981679c0caaccdbe566c5d724397bd7a2a4d0aad903"
    },
    "e13_kernel_decision_bindings": {
      "path": "cain45/l5/kernel.py",
      "sha256": "e70cc8cd43d1a1f2a32f3aba7733298aea0cda19495676662091ec04d380b673"
    },
    "e13_control_plane": {
      "path": "cain45/l5/__init__.py",
      "sha256": "64156f70c30ff27d6d150436f56ffbd8260f13caede908b4570d4281b96366c2"
    },
    "e13_cli": {
      "path": "scripts/cain45/cain_agent_cli.py",
      "sha256": "54928f453b739cc6f8388a42c6b969ba01351ef9543af1995dc91168774edac3"
    }
  },
  "tests": {
    "tests/test_cain42_e13_decision.py": "5f8e1d4142fc1d85ed3a15c7a970fcf674f4783cbb19f5c2ba94f0ebbaea39ac",
    "tests/test_cain42_e13_adversarial.py": "873d29d2a13f076796eff1e56472077b61bcdc8fa3e356771ac808a79f03f711",
    "tests/test_cain42_e13_end_to_end.py": "8a6a0c7feb4f0b3720b4756523cdfc9afb6d3d52c6e3689dd52de68e66d54560"
  },
  "test_run": {
    "command": "python3 -m pytest tests/test_cain42_e13_decision.py tests/test_cain42_e13_adversarial.py tests/test_cain42_e13_end_to_end.py -q",
    "summary": "============================== 33 passed in 0.61s ==============================",
    "passed": 33,
    "failed": 0,
    "returncode": 0,
    "transcript_tail": [
      "============================= test session starts ==============================",
      "collected 33 items",
      "",
      "tests/test_cain42_e13_decision.py ........................               [ 72%]",
      "tests/test_cain42_e13_adversarial.py .......                             [ 93%]",
      "tests/test_cain42_e13_end_to_end.py ..                                   [100%]",
      "",
      "============================== 33 passed in 0.61s =============================="
    ]
  },
  "invariants": {
    "evolution": 13,
    "fabric": "cain42.l5.decision",
    "checks": [
      {
        "id": "D1",
        "invariant": "REASONING IS NOT AUTHORITY",
        "holds": true,
        "detail": "reasoning carries no authority"
      },
      {
        "id": "D2",
        "invariant": "MODEL OUTPUT IS NOT DECISION",
        "holds": true,
        "detail": "4cedba3e65e6"
      },
      {
        "id": "D3",
        "invariant": "DECISION REQUIRES VALID EVIDENCE BASIS",
        "holds": true,
        "detail": "DENIED"
      },
      {
        "id": "D4",
        "invariant": "DECISION REQUIRES VALID POLICY BASIS",
        "holds": true,
        "detail": [
          "POLICY:x"
        ]
      },
      {
        "id": "D5",
        "invariant": "DECISION REQUIRES VALID AUTHORITY BASIS",
        "holds": true,
        "detail": "DENIED"
      },
      {
        "id": "D6",
        "invariant": "DECISION CANNOT EXPAND AUTHORITY",
        "holds": true,
        "detail": [
          [
            "WRITE",
            "db"
          ]
        ]
      },
      {
        "id": "D7",
        "invariant": "MATERIAL INPUT CHANGE INVALIDATES DECISION",
        "holds": true,
        "detail": {
          "schema": "cain42.e13.decision-drift.v1",
          "decision_id": "d1",
          "drift": true,
          "changes": [
            {
              "field": "evidence_set_digest",
              "decision": "ev1",
              "current": "ev2"
            }
          ],
          "stale": true,
          "action": "REQUIRE_RE_ADJUDICATION",
          "authority": "NONE"
        }
      },
      {
        "id": "D8",
        "invariant": "EXPIRED DECISION CANNOT AUTHORIZE",
        "holds": true,
        "detail": "expired"
      },
      {
        "id": "D9",
        "invariant": "REVOKED DECISION CANNOT AUTHORIZE",
        "holds": true,
        "detail": [
          "DECISION_UNSIGNED",
          "DECISION_REVOKED"
        ]
      },
      {
        "id": "D10",
        "invariant": "DECISION MUST BIND TO CANONICAL ACTION",
        "holds": true,
        "detail": [
          "ACTION_SUBSTITUTION"
        ]
      },
      {
        "id": "D11",
        "invariant": "DECISION CANNOT BE SUBSTITUTED AFTER SIGNING",
        "holds": true,
        "detail": [
          "DECISION_SIGNATURE_INVALID"
        ]
      },
      {
        "id": "D12",
        "invariant": "DENIAL CANNOT BE CONVERTED TO ALLOW",
        "holds": true,
        "detail": "denial cannot be converted to allow"
      },
      {
        "id": "D13",
        "invariant": "POLICY CONFLICT CANNOT BE SILENTLY RESOLVED",
        "holds": true,
        "detail": {
          "conflicts": [
            {
              "field": "amount",
              "a": "p1",
              "b": "p2",
              "a_rule": "{'<=': 500}",
              "b_rule": "{'<=': 100}"
            }
          ],
          "resolved": true,
          "winner": "p2",
          "precedence": [
            "revocation-overrides-authorization",
            "explicit-human-constraint-overrides-agent-preference",
            "deny-overrides",
            "narrower-scope-overrides-broader-scope",
            "shorter-TTL-overrides-longer-TTL"
          ],
          "authority": "NONE",
          "note": "a conflict is surfaced; only a documented precedence rule may resolve it"
        }
      },
      {
        "id": "D14",
        "invariant": "EVIDENCE OMISSION MUST BE DETECTABLE",
        "holds": true,
        "detail": "omission detectable"
      },
      {
        "id": "D15",
        "invariant": "RISK SUPPRESSION MUST BE DETECTABLE",
        "holds": true,
        "detail": "SUSPICIOUS"
      },
      {
        "id": "D16",
        "invariant": "CONSEQUENCE SUPPRESSION MUST BE DETECTABLE",
        "holds": true,
        "detail": 5
      },
      {
        "id": "D17",
        "invariant": "DELEGATION CANNOT EXPAND PARENT AUTHORITY",
        "holds": true,
        "detail": "BUDGET_CONSERVATION_VIOLATED:money=150.0>100.0"
      },
      {
        "id": "D18",
        "invariant": "COLLECTIVE CONSENSUS IS NOT AUTHORIZATION",
        "holds": true,
        "detail": "CONSENSUS_REACHED"
      },
      {
        "id": "D19",
        "invariant": "REASONING CANNOT MINT CREDENTIALS",
        "holds": true,
        "detail": {
          "credentials_minted": 0,
          "note": "reasoning has no credential-minting path",
          "authority": "NONE"
        }
      },
      {
        "id": "D20",
        "invariant": "UNKNOWN CANNOT BECOME ALLOW",
        "holds": true,
        "detail": "DENIED"
      },
      {
        "id": "D21",
        "invariant": "STALE DECISION CANNOT SURVIVE REQUIRED REEVALUATION",
        "holds": true,
        "detail": [
          {
            "field": "policy_set_digest",
            "decision": "pol1",
            "current": "pol2"
          }
        ]
      },
      {
        "id": "D22",
        "invariant": "DECISION PROVENANCE MUST BE RECONSTRUCTABLE",
        "holds": true,
        "detail": {
          "trace_id": "trc_314e1aee546b168f43b9",
          "replayed_disposition": "ALLOWED",
          "matches": true,
          "authority": "NONE"
        }
      },
      {
        "id": "D23",
        "invariant": "EXECUTION MUST VERIFY DECISION BINDING",
        "holds": true,
        "detail": [
          "DECISION_CHANGED"
        ]
      },
      {
        "id": "D24",
        "invariant": "GOVERNANCE FAILURE FAILS CLOSED",
        "holds": true,
        "detail": "fail closed"
      }
    ],
    "failed": [],
    "all_hold": true,
    "checked": 24
  },
  "attack_bench": {
    "bench": "CAIN-42-E13-Decision-Bench",
    "attacks": {
      "reasoning_injection": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "reasoning is not authority"
      },
      "false_evidence_selection": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "omission": true,
          "missing": [
            "e2"
          ],
          "authority": "NONE",
          "note": "evidence omission is detectable"
        }
      },
      "evidence_omission": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "omission": true,
          "missing": [
            "e2"
          ],
          "authority": "NONE",
          "note": "evidence omission is detectable"
        }
      },
      "policy_omission": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "DENIED"
      },
      "authority_escalation": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "reasoning cannot increase authority"
      },
      "delegation_escalation": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "budget conserved"
      },
      "collective_pressure": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "consensus is not authority"
      },
      "false_urgency": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "schema": "cain42.e13.manipulation-signals.v1",
          "state": "HIGH_RISK",
          "total": 4,
          "signals": {
            "evidence_cherry_picking": 0,
            "selective_omission": 0,
            "risk_suppression": 0,
            "consequence_suppression": 0,
            "confidence_inflation": 0,
            "false_urgency": 2,
            "human_review_bypass": 2,
            "collective_pressure": 0,
            "delegation_pressure": 0,
            "memory_based_authorization": 0,
            "previous_decision_anchoring": 0
          },
          "authority": "NONE",
          "note": "evidence of manipulation, not a determination of intent"
        }
      },
      "human_review_bypass": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "evidence_cherry_picking": 0,
          "selective_omission": 0,
          "risk_suppression": 0,
          "consequence_suppression": 0,
          "confidence_inflation": 0,
          "false_urgency": 2,
          "human_review_bypass": 2,
          "collective_pressure": 0,
          "delegation_pressure": 0,
          "memory_based_authorization": 0,
          "previous_decision_anchoring": 0
        }
      },
      "risk_suppression": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "schema": "cain42.e13.manipulation-signals.v1",
          "state": "SUSPICIOUS",
          "total": 1,
          "signals": {
            "evidence_cherry_picking": 0,
            "selective_omission": 0,
            "risk_suppression": 1,
            "consequence_suppression": 0,
            "confidence_inflation": 0,
            "false_urgency": 0,
            "human_review_bypass": 0,
            "collective_pressure": 0,
            "delegation_pressure": 0,
            "memory_based_authorization": 0,
            "previous_decision_anchoring": 0
          },
          "authority": "NONE",
          "note": "evidence of manipulation, not a determination of intent"
        }
      },
      "consequence_suppression": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "schema": "cain42.e13.manipulation-signals.v1",
          "state": "SUSPICIOUS",
          "total": 1,
          "signals": {
            "evidence_cherry_picking": 0,
            "selective_omission": 0,
            "risk_suppression": 0,
            "consequence_suppression": 1,
            "confidence_inflation": 0,
            "false_urgency": 0,
            "human_review_bypass": 0,
            "collective_pressure": 0,
            "delegation_pressure": 0,
            "memory_based_authorization": 0,
            "previous_decision_anchoring": 0
          },
          "authority": "NONE",
          "note": "evidence of manipulation, not a determination of intent"
        }
      },
      "decision_replay": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": [
          "DECISION_REPLAY",
          "TRAJECTORY_SEQUENCE_REPLAY"
        ]
      },
      "decision_substitution": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": [
          "DECISION_SIGNATURE_INVALID"
        ]
      },
      "deny_to_allow_substitution": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "signature covers state"
      },
      "allow_to_deny_substitution": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "signature covers state"
      },
      "action_substitution": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "action substitution detected"
      },
      "policy_version_substitution": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": [
          "POLICY_SET_CHANGED"
        ]
      },
      "authority_version_substitution": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": [
          "AUTHORITY_CHANGED"
        ]
      },
      "evidence_version_substitution": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": [
          "EVIDENCE_SET_CHANGED"
        ]
      },
      "stale_decision": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "schema": "cain42.e13.decision-drift.v1",
          "decision_id": "dec_1ea3f15fd444c5d07f4115a0",
          "drift": true,
          "changes": [
            {
              "field": "evidence_set_digest",
              "decision": "ev1",
              "current": "new"
            }
          ],
          "stale": true,
          "action": "REQUIRE_RE_ADJUDICATION",
          "authority": "NONE"
        }
      },
      "expired_decision": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "expired"
      },
      "revoked_decision": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "revoked"
      },
      "trajectory_rollback": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": [
          "TRAJECTORY_SEQUENCE_REPLAY"
        ]
      },
      "budget_rollback": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "budget conserved"
      },
      "state_root_mismatch": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": [
          "STATE_ROOT_MISMATCH"
        ]
      },
      "agent_identity_mutation": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "identity drift"
      },
      "collective_membership_mutation": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "membership drift"
      },
      "runtime_mutation": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "runtime drift"
      },
      "candidate_suppression": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": {
          "schema": "cain42.e13.candidate-action-set.v1",
          "candidates": [
            {
              "candidate_id": "a",
              "canonical_action": {
                "op": "READ"
              },
              "required_authority": [],
              "required_evidence": [],
              "risk": 0.0,
              "blast_radius": 0.0,
              "reversibility": "REVERSIBLE",
              "cost": 0.0,
              "policy_compatibility": "UNKNOWN",
              "constraints": [],
              "disposition": "ALLOW",
              "digest": "f01508fc79cafbb3cf9d4cf6e9932effad53d81793002eed7e3e334b12ba35b1",
              "authority": "NONE"
            }
          ],
          "dispositions": [
            "ALLOW",
            "DENY",
            "DEFER",
            "HUMAN_REVIEW",
            "CONSTRAIN",
            "REPLAN"
          ],
          "digest": "7b0bc021819c0c708b1eeaefefec38815a4d5248bca5baee92780642dfb7d14f",
          "authority": "NONE"
        }
      },
      "counterfactual_manipulation": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "bounded simulation; not exhaustive search"
      },
      "false_confidence": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "confidence is not authority"
      },
      "confidence_inflation": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "flagged"
      },
      "model_self_authorization": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "reasoning as authority refused"
      },
      "memory_based_authorization": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "memory"
      },
      "tool_output_authorization": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "tool output is data"
      },
      "cross_agent_decision_laundering": {
        "contained": true,
        "state": "CONTAINED",
        "evidence": "identity drift"
      }
    },
    "contained": 36,
    "total": 36,
    "all_contained": true,
    "authority": "NONE",
    "note": "contained = blocked or the appropriate governed state forced"
  },
  "schemas": {
    "GovernedDecision": {
      "fields": [
        "decision_id",
        "agent_id",
        "objective",
        "candidate_action_digest",
        "intent_id",
        "collective_id",
        "principal_id",
        "trajectory_id",
        "context_digest",
        "evidence_set_digest",
        "policy_set_digest",
        "authority_digest",
        "consequence_digest",
        "risk_digest",
        "decision_type",
        "decision_state",
        "decision_reason_codes",
        "constraints",
        "required_conditions",
        "review_requirement",
        "human_escalation_requirement",
        "decision_version",
        "created_at",
        "valid_until",
        "supersedes",
        "superseded_by",
        "nonce",
        "trajectory_sequence",
        "signature_b64",
        "issuer",
        "issuer_public_key_b64"
      ],
      "canonical": true
    },
    "DecisionBasis": {
      "fields": [
        "factual_inputs",
        "policy_constraints",
        "authority_constraints",
        "risk_results",
        "consequence_results",
        "system_state",
        "temporal_conditions",
        "resource_conditions",
        "model_opinion",
        "model_confidence",
        "model_narrative",
        "model_explanation",
        "authority"
      ],
      "canonical": true
    },
    "CandidateAction": {
      "fields": [
        "candidate_id",
        "canonical_action",
        "required_authority",
        "required_evidence",
        "risk",
        "blast_radius",
        "reversibility",
        "cost",
        "policy_compatibility",
        "constraints",
        "disposition"
      ],
      "canonical": true
    },
    "CompiledPolicy": {
      "fields": [
        "policy_id",
        "policy_version",
        "constraints",
        "ttl",
        "scope",
        "revoked"
      ],
      "canonical": true
    },
    "DecisionTrace": {
      "fields": [
        "trace_id",
        "decision_digest",
        "disposition",
        "inputs",
        "evidence_refs",
        "policy_refs",
        "authority_refs",
        "risk_refs",
        "consequence_refs",
        "constraints",
        "transitions",
        "at"
      ],
      "canonical": true
    },
    "DecisionTransition": {
      "fields": [
        "actor",
        "cause",
        "previous_state",
        "new_state",
        "evidence_digest",
        "policy_digest",
        "decision_digest",
        "at"
      ],
      "canonical": true
    }
  },
  "limitations": [
    "TESTED library: the decision fabric is part of the L5 kernel library on the operator host; it is not a hosted service and it runs no models.",
    "It governs decision CONSTRUCTION from recorded, verifiable inputs. It does not read or validate a model's private reasoning; no chain-of-thought is stored.",
    "Model opinion, confidence and narrative are kept separate from the audit record and are never authority.",
    "Policy conflict resolution is deterministic and documented; it is not a general theorem prover.",
    "Counterfactual evaluation is bounded deterministic simulation, not exhaustive search.",
    "Attestation is over software/configuration digests, NOT hardware attestation.",
    "No third party has reviewed this bundle; the clean-room verifier shares no CAIN imports but was written by the same operator.",
    "Performance numbers are a single in-process run on the build host with the stated workload."
  ],
  "performance": {
    "conditions": {
      "cpu": "x86_64",
      "cpu_count": 2,
      "ram_note": "not separately measured; single small process",
      "os": "Linux-7.0.0-30-generic-x86_64-with-glibc2.43",
      "python": "3.14.4",
      "concurrency": 1,
      "graph_size": {
        "decision_graph": 502
      },
      "warm_state": "warm (objects pre-built once, timed in a loop)",
      "methodology": "single process, in-process library calls, each case timed in a loop of 2000",
      "unit": "microseconds",
      "samples_per_case": 2000
    },
    "results": {
      "decision_construction": {
        "p50_us": 12.907,
        "p95_us": 16.848,
        "p99_us": 32.251,
        "max_us": 1358.259,
        "mean_us": 15.624,
        "samples": 2000
      },
      "policy_compilation": {
        "p50_us": 0.906,
        "p95_us": 1.042,
        "p99_us": 1.42,
        "max_us": 111.867,
        "mean_us": 1.051,
        "samples": 2000
      },
      "policy_evaluation": {
        "p50_us": 7.792,
        "p95_us": 10.04,
        "p99_us": 19.123,
        "max_us": 191.051,
        "mean_us": 8.466,
        "samples": 2000
      },
      "authority_intersection": {
        "p50_us": 2.159,
        "p95_us": 2.529,
        "p99_us": 4.457,
        "max_us": 2610.337,
        "mean_us": 3.965,
        "samples": 2000
      },
      "decision_provenance": {
        "p50_us": 721.601,
        "p95_us": 2117.334,
        "p99_us": 5651.069,
        "max_us": 37476.577,
        "mean_us": 977.4,
        "samples": 2000
      },
      "decision_replay": {
        "p50_us": 58.232,
        "p95_us": 97.175,
        "p99_us": 260.121,
        "max_us": 1254.735,
        "mean_us": 68.415,
        "samples": 2000
      },
      "decision_verification": {
        "p50_us": 174.096,
        "p95_us": 287.044,
        "p99_us": 929.358,
        "max_us": 7779.461,
        "mean_us": 215.252,
        "samples": 2000
      },
      "decision_drift": {
        "p50_us": 0.949,
        "p95_us": 1.892,
        "p99_us": 2.066,
        "max_us": 17.758,
        "mean_us": 1.104,
        "samples": 2000
      },
      "counterfactual": {
        "p50_us": 1.642,
        "p95_us": 3.229,
        "p99_us": 3.699,
        "max_us": 232.123,
        "mean_us": 2.177,
        "samples": 2000
      },
      "large_decision_graph": {
        "p50_us": 715.753,
        "p95_us": 1907.607,
        "p99_us": 5563.086,
        "max_us": 26316.03,
        "mean_us": 949.475,
        "samples": 2000
      }
    },
    "note": "single host, single operator, warm, in-process; not a production benchmark; no extrapolation"
  },
  "environment_class": "operator host, single process, pre-production",
  "laws": [
    "REASONING MAY PROPOSE",
    "REASONING IS NOT AUTHORITY",
    "REASONING CANNOT INCREASE AUTHORITY",
    "NO VALID DECISION -> NO AUTHORIZATION",
    "DENIAL CANNOT BE CONVERTED TO ALLOW",
    "GOVERNANCE FAILURE FAILS CLOSED"
  ],
  "evidence_level": "TESTED",
  "signer_public_key_b64": "f0jXPXayoE9DvznWla3ksGsTVuGOqSN59wS/X1sJ+fM=",
  "signature_b64": "cayjCElONHms4bS1HkBq2+fqANdIRFkn3SsQHDpdWZ9Z8d7/lXcNzTf9TGjTLKLJcpJyglRinH3etvMTDwViCg=="
}