{ "capabilities": [ { "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286", "manifest": { "schema": "cain42.e14.capability-manifest.v1", "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286", "capability_type": "TOOL", "name": "kv.get", "version": "1.0.0", "publisher_principal": "publisher:acme", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "implementation_digest": "68c7dd93608a8222993b87e77432e1601101dea3f4fa0a63c67da1a8eca40c41", "semantic_version": "1.0.0", "owner_principal": "org:acme", "provenance": { "publisher_principal": "publisher:acme", "name": "kv.get", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/kv.get", "repository": "acme/kv.get", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20" }, "dependency_set": [], "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "capability_scope": { "resources": [ "tool:kv.get" ], "tenants": [ "tenant-a" ] }, "input_schema": { "type": "object" }, "output_schema": { "type": "object" }, "required_permissions": [ "CALL_MCP_TOOL", "READ_DATA" ], "data_access_scope": [], "network_scope": [], "filesystem_scope": [], "credential_requirements": [ "kv:read" ], "execution_environment": "cain45-zod", "side_effect_class": "READ_ONLY", "reversibility": "REVERSIBLE", "consequence_class": "LOW", "risk_class": "LOW", "trust_requirements": [], "authority_requirements": [], "policy_requirements": [], "supported_protocols": [ "MCP" ], "supported_agent_types": [ "L5" ], "expiration": 0.0, "extensions": { "tool": { "data_classes": [], "endpoint": "mcp://acme/kv.get", "protocol": "MCP", "provider": "acme", "rate_limit_per_minute": 0, "resource_limits": [] } } }, "manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24", "provenance": { "publisher_principal": "publisher:acme", "name": "kv.get", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/kv.get", "repository": "acme/kv.get", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20", "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=", "publisher_signature_b64": "alJ3PK0FB0MG8X96adpkqJDEWdG1NR/dSAaPetTyQfcHeXvcOtuH2vpwCWcQE/xPetZ1IMvikyZrP4xDuDIsBA==" }, "attestation": { "capability_id": "cap:ed104a4d9965c1d8112fd22948e3be3bd237d24547af1bcb0376a215c2ec3286", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "manifest_digest": "be64cb3c8d5f3830ab2b7765c647804df0c7a3530403aec36b7b06e704a7ba24", "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "configuration_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a", "runtime_identity": "runtime:unspecified", "provider": "SOFTWARE_CONFIGURATION", "level": "SOFTWARE_CONFIGURATION", "hardware_attestation": "UNKNOWN", "issuer": "cain:e14-software-attestor", "at": 1000.0, "status": "ATTESTED", "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=", "signature_b64": "JW8OeD6tKzvzzBLK8BoxDe3xbXmbzCL8ycbRnyfOSt0fNaXOToqN5ChCOuNPAUS8AjnFAkgDwd520LNR4ad6Aw==" }, "lifecycle_state_at_publication": "REVOKED" }, { "capability_id": "cap:3795533e24704a1c5bde96e8c685b24ce3f9e04c5dd102811d6ee0d2d763fd3b", "manifest": { "schema": "cain42.e14.capability-manifest.v1", "capability_id": "cap:3795533e24704a1c5bde96e8c685b24ce3f9e04c5dd102811d6ee0d2d763fd3b", "capability_type": "TOOL", "name": "vault.read", "version": "1.0.0", "publisher_principal": "publisher:acme", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "implementation_digest": "68c7dd93608a8222993b87e77432e1601101dea3f4fa0a63c67da1a8eca40c41", "semantic_version": "1.0.0", "owner_principal": "org:acme", "provenance": { "publisher_principal": "publisher:acme", "name": "vault.read", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/vault.read", "repository": "acme/vault.read", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20" }, "dependency_set": [], "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "capability_scope": { "resources": [ "tool:vault.read" ], "tenants": [ "tenant-a" ] }, "input_schema": { "type": "object" }, "output_schema": { "type": "object" }, "required_permissions": [ "CALL_MCP_TOOL", "READ_SECRET" ], "data_access_scope": [], "network_scope": [], "filesystem_scope": [], "credential_requirements": [], "execution_environment": "cain45-zod", "side_effect_class": "READ_ONLY", "reversibility": "REVERSIBLE", "consequence_class": "LOW", "risk_class": "LOW", "trust_requirements": [], "authority_requirements": [], "policy_requirements": [], "supported_protocols": [ "MCP" ], "supported_agent_types": [ "L5" ], "expiration": 0.0, "extensions": { "tool": { "data_classes": [], "endpoint": "mcp://acme/vault.read", "protocol": "MCP", "provider": "acme", "rate_limit_per_minute": 0, "resource_limits": [] } } }, "manifest_digest": "6f98ef1834a67979045109653afccab962cec6a7b9ffa3967269c791e6037594", "provenance": { "publisher_principal": "publisher:acme", "name": "vault.read", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/vault.read", "repository": "acme/vault.read", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20", "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=", "publisher_signature_b64": "anuRj71f1XiCnVxzk0kgJ3SmmjqoBIHzl3+6rbbir2IDMguK6Eg2LrNeWJ9+SP54prKKuoAPO6zqNv/K3Y2LBg==" }, "attestation": { "capability_id": "cap:3795533e24704a1c5bde96e8c685b24ce3f9e04c5dd102811d6ee0d2d763fd3b", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "manifest_digest": "6f98ef1834a67979045109653afccab962cec6a7b9ffa3967269c791e6037594", "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "configuration_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a", "runtime_identity": "runtime:unspecified", "provider": "SOFTWARE_CONFIGURATION", "level": "SOFTWARE_CONFIGURATION", "hardware_attestation": "UNKNOWN", "issuer": "cain:e14-software-attestor", "at": 1000.0, "status": "ATTESTED", "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=", "signature_b64": "nTZ7HmChW0oL/iFmwE8egdMPC3FwGeS9diyYlns9WygYixFCKVHPLRJSQCFdhy/5hVbX6QAJhDRrSYLX/VszAg==" }, "lifecycle_state_at_publication": "ADMITTED" }, { "capability_id": "cap:be016deede3cf106ea3cbc9622c941893d7c1d536d99572407af6c461c5ab872", "manifest": { "schema": "cain42.e14.capability-manifest.v1", "capability_id": "cap:be016deede3cf106ea3cbc9622c941893d7c1d536d99572407af6c461c5ab872", "capability_type": "TOOL", "name": "http.post", "version": "1.0.0", "publisher_principal": "publisher:acme", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "implementation_digest": "68c7dd93608a8222993b87e77432e1601101dea3f4fa0a63c67da1a8eca40c41", "semantic_version": "1.0.0", "owner_principal": "org:acme", "provenance": { "publisher_principal": "publisher:acme", "name": "http.post", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/http.post", "repository": "acme/http.post", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20" }, "dependency_set": [], "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "capability_scope": { "resources": [ "tool:http.post" ], "tenants": [ "tenant-a" ] }, "input_schema": { "type": "object" }, "output_schema": { "type": "object" }, "required_permissions": [ "CALL_MCP_TOOL", "NETWORK_ACCESS" ], "data_access_scope": [], "network_scope": [ "api.example.com" ], "filesystem_scope": [], "credential_requirements": [], "execution_environment": "cain45-zod", "side_effect_class": "READ_ONLY", "reversibility": "REVERSIBLE", "consequence_class": "LOW", "risk_class": "LOW", "trust_requirements": [], "authority_requirements": [], "policy_requirements": [], "supported_protocols": [ "MCP" ], "supported_agent_types": [ "L5" ], "expiration": 0.0, "extensions": { "tool": { "data_classes": [], "endpoint": "mcp://acme/http.post", "protocol": "MCP", "provider": "acme", "rate_limit_per_minute": 0, "resource_limits": [] } } }, "manifest_digest": "70b52d6da1b96505709532cacc66e5bb78416eed68471f10e4509d7035165126", "provenance": { "publisher_principal": "publisher:acme", "name": "http.post", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/http.post", "repository": "acme/http.post", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20", "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=", "publisher_signature_b64": "LS+XEEPbbeEHTFwvQkcok2UYM/PQ3Hr/zNeabcTgu9BFueoA1zrmJM8GnVq718cJ/BRrH23fmM597gSQrYsVDg==" }, "attestation": { "capability_id": "cap:be016deede3cf106ea3cbc9622c941893d7c1d536d99572407af6c461c5ab872", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "manifest_digest": "70b52d6da1b96505709532cacc66e5bb78416eed68471f10e4509d7035165126", "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "configuration_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a", "runtime_identity": "runtime:unspecified", "provider": "SOFTWARE_CONFIGURATION", "level": "SOFTWARE_CONFIGURATION", "hardware_attestation": "UNKNOWN", "issuer": "cain:e14-software-attestor", "at": 1000.0, "status": "ATTESTED", "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=", "signature_b64": "AF4xDXgPr5sKDYQqVSsZlALiUeuTjMhcEoJf2TvNvwB2zi9odpi0XjuNSNdYZLpJZv973GKzV2nWekNk5q3GBQ==" }, "lifecycle_state_at_publication": "ADMITTED" }, { "capability_id": "cap:f3269b84c6e29a9245d6f0b8f072495325fbfe0a84f4b41f9161bf28eeaae1b7", "manifest": { "schema": "cain42.e14.capability-manifest.v1", "capability_id": "cap:f3269b84c6e29a9245d6f0b8f072495325fbfe0a84f4b41f9161bf28eeaae1b7", "capability_type": "PLUGIN", "name": "fmt", "version": "1.0.0", "publisher_principal": "publisher:acme", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "implementation_digest": "68c7dd93608a8222993b87e77432e1601101dea3f4fa0a63c67da1a8eca40c41", "semantic_version": "1.0.0", "owner_principal": "org:acme", "provenance": { "publisher_principal": "publisher:acme", "name": "fmt", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/fmt", "repository": "acme/fmt", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20" }, "dependency_set": [ { "name": "parser", "version": "2.0.0", "digest": "1111111111111111111111111111111111111111111111111111111111111111", "publisher": "publisher:acme", "required_permissions": [] } ], "dependency_digest": "48719f06e462db7e0c35b9d7586bf948a5af177baf1d6feebd23b8aabb2cb5da", "capability_scope": { "resources": [ "tool:fmt" ], "tenants": [ "tenant-a" ] }, "input_schema": { "type": "object" }, "output_schema": { "type": "object" }, "required_permissions": [ "CALL_MCP_TOOL", "READ_DATA" ], "data_access_scope": [], "network_scope": [], "filesystem_scope": [], "credential_requirements": [], "execution_environment": "cain45-zod", "side_effect_class": "READ_ONLY", "reversibility": "REVERSIBLE", "consequence_class": "LOW", "risk_class": "LOW", "trust_requirements": [], "authority_requirements": [], "policy_requirements": [], "supported_protocols": [ "MCP" ], "supported_agent_types": [ "L5" ], "expiration": 0.0, "extensions": {} }, "manifest_digest": "73c72e4ece2f405bb19cda4fde2208c5d576ca6921ef15ed6dedd9c9fbdc0178", "provenance": { "publisher_principal": "publisher:acme", "name": "fmt", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/fmt", "repository": "acme/fmt", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20", "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=", "publisher_signature_b64": "cM2d7wX6hX3qoyg28i70zQouBd6Jis9xnxTLO53cGCUgBu5ANA8AH0wLY6ad+7I/QyiFiMumP1IxDwFXtL0sAA==" }, "attestation": { "capability_id": "cap:f3269b84c6e29a9245d6f0b8f072495325fbfe0a84f4b41f9161bf28eeaae1b7", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "manifest_digest": "73c72e4ece2f405bb19cda4fde2208c5d576ca6921ef15ed6dedd9c9fbdc0178", "dependency_digest": "48719f06e462db7e0c35b9d7586bf948a5af177baf1d6feebd23b8aabb2cb5da", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "configuration_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a", "runtime_identity": "runtime:unspecified", "provider": "SOFTWARE_CONFIGURATION", "level": "SOFTWARE_CONFIGURATION", "hardware_attestation": "UNKNOWN", "issuer": "cain:e14-software-attestor", "at": 1000.0, "status": "ATTESTED", "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=", "signature_b64": "a++2raoO6EKJ3pfhaBWSfXEEwrsPha9dogObnF6rOz21ODVhRxq24mmq7Lf0rXrqaNA+lIgbwkPXWZPh8iO2Dg==" }, "lifecycle_state_at_publication": "ADMITTED" }, { "capability_id": "cap:03e8823d7a3c135cab092900b69cc82a396d050c0c7e5409b989c753ecf881f3", "manifest": { "schema": "cain42.e14.capability-manifest.v1", "capability_id": "cap:03e8823d7a3c135cab092900b69cc82a396d050c0c7e5409b989c753ecf881f3", "capability_type": "SKILL", "name": "summarize", "version": "1.0.0", "publisher_principal": "publisher:acme", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "implementation_digest": "68c7dd93608a8222993b87e77432e1601101dea3f4fa0a63c67da1a8eca40c41", "semantic_version": "1.0.0", "owner_principal": "org:acme", "provenance": { "publisher_principal": "publisher:acme", "name": "summarize", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/summarize", "repository": "acme/summarize", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20" }, "dependency_set": [], "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "capability_scope": { "resources": [ "tool:summarize" ], "tenants": [ "tenant-a" ] }, "input_schema": { "type": "object" }, "output_schema": { "type": "object" }, "required_permissions": [ "READ_DATA" ], "data_access_scope": [], "network_scope": [], "filesystem_scope": [], "credential_requirements": [], "execution_environment": "cain45-zod", "side_effect_class": "READ_ONLY", "reversibility": "REVERSIBLE", "consequence_class": "LOW", "risk_class": "LOW", "trust_requirements": [], "authority_requirements": [], "policy_requirements": [], "supported_protocols": [ "MCP" ], "supported_agent_types": [ "L5" ], "expiration": 0.0, "extensions": {} }, "manifest_digest": "b5757db838630ecb385eeef506e705f244a049a76100bbd2ba27958062a5400c", "provenance": { "publisher_principal": "publisher:acme", "name": "summarize", "version": "1.0.0", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "source_uri": "https://git.example/acme/summarize", "repository": "acme/summarize", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "build-1.0.0", "builder": "ci:acme", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "package_digest": "2d9533b0ab0143a1a154f30780065648d5a5d4345cd9f035265861ff75346f20", "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=", "publisher_signature_b64": "dYXfAhsdJVkIVKBkv17Kdz+IZRL22kK7Kz834fV5JfkOi3a14zoatimY+pmppYuGBZceh11KUbt9xJUeYGs6AQ==" }, "attestation": { "capability_id": "cap:03e8823d7a3c135cab092900b69cc82a396d050c0c7e5409b989c753ecf881f3", "artifact_digest": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "manifest_digest": "b5757db838630ecb385eeef506e705f244a049a76100bbd2ba27958062a5400c", "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "build_metadata_digest": "bfa57c5f706f71aad7ce31665cfbd262be4543c66e4bd072eba589d6344b1bb7", "configuration_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a", "runtime_identity": "runtime:unspecified", "provider": "SOFTWARE_CONFIGURATION", "level": "SOFTWARE_CONFIGURATION", "hardware_attestation": "UNKNOWN", "issuer": "cain:e14-software-attestor", "at": 1000.0, "status": "ATTESTED", "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=", "signature_b64": "0dRIRHbttIHsevJG+AzW+s0pr4HB+af4639zQlsJnSzdFsicyEKVsAHVSanXPVed90oRMFdt7ICob3LazFAJAg==" }, "lifecycle_state_at_publication": "ADMITTED" }, { "capability_id": "cap:30ef03f7fecd9a3dd5404deaab358360f837eb701b7db6147e1a8b4ec505927f", "manifest": { "schema": "cain42.e14.capability-manifest.v1", "capability_id": "cap:30ef03f7fecd9a3dd5404deaab358360f837eb701b7db6147e1a8b4ec505927f", "capability_type": "MODEL", "name": "local-llm", "version": "1.0.0", "publisher_principal": "publisher:acme", "artifact_digest": "c7e35e9713d62620b5ccff8ac1501764c9ee8187617835720dce931f7bfe72b2", "implementation_digest": "cc87d299d60f21bcb139871dd1e2337ed59016252f90c3cdf5828c1fad7bc522", "semantic_version": "1.0.0", "owner_principal": "org:acme", "provenance": { "publisher_principal": "publisher:acme", "name": "local-llm", "version": "1.0.0", "artifact_digest": "c7e35e9713d62620b5ccff8ac1501764c9ee8187617835720dce931f7bfe72b2", "source_uri": "https://git.example/m", "repository": "acme/m", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "b-1", "builder": "ci", "build_metadata_digest": "eb8ed3ccb5023093b56f490a46501e88d09736687e609fdbc1c71b3df8b9ccd3", "package_digest": "4835f96cb95414c1b3dd5816bcabc7ae1405283accdbdf990de0f35f07075abb" }, "dependency_set": [], "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "capability_scope": { "tenants": [ "tenant-a" ] }, "input_schema": {}, "output_schema": {}, "required_permissions": [ "MODEL_INFERENCE" ], "data_access_scope": [], "network_scope": [], "filesystem_scope": [], "credential_requirements": [], "execution_environment": "", "side_effect_class": "NONE", "reversibility": "REVERSIBLE", "consequence_class": "UNKNOWN", "risk_class": "UNKNOWN", "trust_requirements": [], "authority_requirements": [], "policy_requirements": [], "supported_protocols": [], "supported_agent_types": [], "expiration": 0.0, "extensions": { "model": { "context_limit": 32768, "data_policy": "no-retention", "deployment_environment": "cain45-zod", "output_classification": "CONTEXT_INPUT_TO_GOVERNANCE", "provider": "self-hosted", "tool_permissions": [ "READ_DATA" ] } } }, "manifest_digest": "dc1db1b9ed9e93959e262656bd789a49fa4e700a0e491a10ee15efedd3a17790", "provenance": { "publisher_principal": "publisher:acme", "name": "local-llm", "version": "1.0.0", "artifact_digest": "c7e35e9713d62620b5ccff8ac1501764c9ee8187617835720dce931f7bfe72b2", "source_uri": "https://git.example/m", "repository": "acme/m", "source_commit": "cccccccccccccccccccccccccccccccccccccccc", "build_id": "b-1", "builder": "ci", "build_metadata_digest": "eb8ed3ccb5023093b56f490a46501e88d09736687e609fdbc1c71b3df8b9ccd3", "package_digest": "4835f96cb95414c1b3dd5816bcabc7ae1405283accdbdf990de0f35f07075abb", "publisher_key_b64": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=", "publisher_signature_b64": "DfZxTms3Ab12ByobfmWstiEIB5RTz05fWGGVilzo5BZ5FhL7kT8Xczb+J+NSWUPirImlUZWbqVlgzqG2EYi7AA==" }, "attestation": { "capability_id": "cap:30ef03f7fecd9a3dd5404deaab358360f837eb701b7db6147e1a8b4ec505927f", "artifact_digest": "c7e35e9713d62620b5ccff8ac1501764c9ee8187617835720dce931f7bfe72b2", "manifest_digest": "dc1db1b9ed9e93959e262656bd789a49fa4e700a0e491a10ee15efedd3a17790", "dependency_digest": "d2ffa35c97fcea8cf3e5d9abae3e536f1c3a1666a7a9ac31d02bae291afd264e", "build_metadata_digest": "eb8ed3ccb5023093b56f490a46501e88d09736687e609fdbc1c71b3df8b9ccd3", "configuration_digest": "44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a", "runtime_identity": "runtime:unspecified", "provider": "SOFTWARE_CONFIGURATION", "level": "SOFTWARE_CONFIGURATION", "hardware_attestation": "UNKNOWN", "issuer": "cain:e14-software-attestor", "at": 1000.0, "status": "ATTESTED", "issuer_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=", "signature_b64": "YsQS9Giie8mc/9fwf0/BUUDaTdPCc1JdOYkktypf1Z0vx9BdWorCaVDNuA+jMZht41eRYpElz3j7erBGM/2uDg==" }, "lifecycle_state_at_publication": "ADMITTED" } ], "powers": [ "READ_DATA", "WRITE_DATA", "READ_SECRET", "NETWORK_ACCESS", "WRITE_DATABASE", "FINANCIAL_API", "CODE_EXECUTION", "CREDENTIAL_ACCESS", "BROWSER_CONTROL", "PAYMENT", "DEPLOYMENT", "PRODUCTION_ACCESS", "SUBAGENT_CREATION", "DELEGATION", "MEMORY_WRITE", "POLICY_WRITE", "IDENTITY_MUTATION", "AUTHORITY_GRANT", "FILESYSTEM_READ", "FILESYSTEM_WRITE", "MODEL_INFERENCE", "CALL_MCP_TOOL" ], "fabric_public_key_b64": "vc3VI5CksYVoSBpreKIDWCUg5pez1VTgIBVWqnRQzIg=", "trusted_publishers": { "publisher:acme": "Ds+sh5iP6f6TIart1jVaQRLBxp81CTArUsHqj/KGWq4=" }, "sandbox": { "profile_id": "sb-kv.get", "cpu_quota_pct": 25, "memory_bytes": 67108864, "filesystem_read": [ "/tmp/work" ], "filesystem_write": [ "/tmp/work" ], "network_egress": [], "subprocess": false, "environment": [], "secrets": [], "credentials": [ "kv:read" ], "devices": [], "ipc": false, "browser": false, "gui": false, "cloud_apis": [], "databases": [], "external_services": [], "default": "DENY", "digest": "f752b06616d144e77bda07756bc6c1afb276aa8ee4374b116c0640b293ae876b", "confinement": { "cpu": "OS_ENFORCED(cgroup cpu.max via cain45.confine)", "memory": "OS_ENFORCED(cgroup memory.max via cain45.confine)", "filesystem": "PARTIAL(OS: only private /tmp writable; per-path allowlist is policy)", "network": "OS_ENFORCED(deny-all network namespace)", "subprocess": "PARTIAL(pids.max + seccomp via cain45.confine; policy decides allow)", "environment": "POLICY_EVALUATED", "secrets": "POLICY_EVALUATED", "credentials": "POLICY_EVALUATED", "devices": "POLICY_EVALUATED", "ipc": "POLICY_EVALUATED", "browser": "POLICY_EVALUATED", "gui": "POLICY_EVALUATED", "cloud_apis": "POLICY_EVALUATED", "databases": "POLICY_EVALUATED", "external_services": "POLICY_EVALUATED" }, "authority": "NONE" }, "composition_example": { "schema": "cain42.e14.composition-risk.v1", "effect": "DENY", "findings": [ { "combination": [ "READ_SECRET", "NETWORK_ACCESS" ], "risk": "SECRET_EXFILTRATION", "effect": "DENY", "capabilities": [ "cap:3795533e24704a1c5bde96e8c685b24ce3f9e04c5dd102811d6ee0d2d763fd3b", "cap:be016deede3cf106ea3cbc9622c941893d7c1d536d99572407af6c461c5ab872" ], "distributed_across_agents": true, "agents": [ "agent-a", "agent-b" ], "via": "combined-surface" } ], "power_surface": [ "CALL_MCP_TOOL", "NETWORK_ACCESS", "READ_SECRET" ], "authority": "NONE", "note": "individual capability safety is not composition safety" }, "dangerous_combinations": [ { "powers": [ "READ_SECRET", "NETWORK_ACCESS" ], "risk": "SECRET_EXFILTRATION", "effect": "DENY" }, { "powers": [ "WRITE_DATABASE", "FINANCIAL_API" ], "risk": "FINANCIAL_STATE_TAMPERING", "effect": "HUMAN_REVIEW" }, { "powers": [ "CODE_EXECUTION", "CREDENTIAL_ACCESS" ], "risk": "CREDENTIAL_ABUSE", "effect": "DENY" }, { "powers": [ "BROWSER_CONTROL", "PAYMENT" ], "risk": "UNATTENDED_PAYMENT", "effect": "HUMAN_REVIEW" }, { "powers": [ "DEPLOYMENT", "PRODUCTION_ACCESS" ], "risk": "UNREVIEWED_PRODUCTION_CHANGE", "effect": "HUMAN_REVIEW" }, { "powers": [ "SUBAGENT_CREATION", "DELEGATION" ], "risk": "AUTHORITY_PROLIFERATION", "effect": "HUMAN_REVIEW" }, { "powers": [ "MEMORY_WRITE", "POLICY_WRITE" ], "risk": "GOVERNANCE_POISONING", "effect": "DENY" }, { "powers": [ "IDENTITY_MUTATION", "AUTHORITY_GRANT" ], "risk": "PRIVILEGE_MINTING", "effect": "DENY" }, { "powers": [ "CREDENTIAL_ACCESS", "AUTHORITY_GRANT" ], "risk": "SECRET_TO_AUTHORITY", "effect": "DENY" }, { "powers": [ "CREDENTIAL_ACCESS", "NETWORK_ACCESS" ], "risk": "CREDENTIAL_EXFILTRATION", "effect": "DENY" } ], "framework_adapters": { "MCP": "IMPLEMENTED (protocol-level reference adapter, tools/list + tools/call)", "A2A": "NOT_IMPLEMENTED", "LangGraph": "NOT_IMPLEMENTED", "AutoGen": "NOT_IMPLEMENTED", "CrewAI": "NOT_IMPLEMENTED", "OpenAI Agents SDK": "NOT_IMPLEMENTED" }, "signing": { "algorithm": "Ed25519", "key_class": "EPHEMERAL", "note": "only Ed25519 public keys appear in this bundle" } }