{
  "generated_at": "2026-09-28T23:07:25+00:00",
  "commit": "3106ea9e1626871a44d15b879d1a864ca6846e6e",
  "bundle_name": "e9-agent-passport-2026-09-28",
  "modules": {
    "e9_passport": {
      "path": "cain45/l5/passport.py",
      "sha256": "f73bbb438a86e2ad7d267d4f3b7bb12d83c245c81e64ba6c8eca6821905302d3"
    },
    "e9_kernel_provenance_bindings": {
      "path": "cain45/l5/kernel.py",
      "sha256": "e70cc8cd43d1a1f2a32f3aba7733298aea0cda19495676662091ec04d380b673"
    },
    "e9_control_plane": {
      "path": "cain45/l5/__init__.py",
      "sha256": "64156f70c30ff27d6d150436f56ffbd8260f13caede908b4570d4281b96366c2"
    },
    "e9_cli": {
      "path": "scripts/cain45/cain_agent_cli.py",
      "sha256": "54928f453b739cc6f8388a42c6b969ba01351ef9543af1995dc91168774edac3"
    }
  },
  "tests": {
    "tests/test_cain42_e9_passport.py": "e903e270f183f0da96f0a212e98a25da6278b756ad8a4984e2189d8d78b393bf",
    "tests/test_cain42_e9_provenance.py": "66a8d5d933c190a5498331eb467e5e47414656f645ad1d4a1c24ab7c6f036aff",
    "tests/test_cain42_e9_end_to_end.py": "6b1f6163ef36ad6946f6af5421cb8bcae996c38538a5ca73270eda296a579c7a"
  },
  "test_run": {
    "command": "python3 -m pytest tests/test_cain42_e9_passport.py tests/test_cain42_e9_provenance.py tests/test_cain42_e9_end_to_end.py -q",
    "summary": "============================== 46 passed in 0.54s ==============================",
    "passed": 46,
    "failed": 0,
    "returncode": 0,
    "transcript_tail": [
      "============================= test session starts ==============================",
      "collected 46 items",
      "",
      "tests/test_cain42_e9_passport.py .......................                 [ 50%]",
      "tests/test_cain42_e9_provenance.py ...................                   [ 91%]",
      "tests/test_cain42_e9_end_to_end.py ....                                  [100%]",
      "",
      "============================== 46 passed in 0.54s =============================="
    ]
  },
  "limitations": [
    "TESTED library: the passport/provenance fabric is part of the L5 kernel library on the operator host; it is not a hosted identity service.",
    "Attestation here is over canonical software/configuration digests and a supplied measurement. It is NOT hardware attestation (no TPM/TEE); unknown hardware attestation stays UNKNOWN.",
    "No vulnerability database is embedded: vulnerability_status is UNKNOWN unless a real source provided it.",
    "Delegation-link signature verification checks presence in the library; end-to-end cryptographic verification of every link is delegated to the existing authority fabric / PBFT path.",
    "The transaction guarantees are stated for the GOVERNED evidence/state layer only; arbitrary external systems are not claimed to support rollback (compensating controls instead).",
    "Framework adapters (E9 Part 31) are not claimed: no adapter is published, therefore none is described as supported.",
    "No third party has reviewed this bundle; the clean-room verifier shares no CAIN imports but was written by the same operator.",
    "Performance numbers are from a single in-process run on the build host with the stated workload; they are not a production benchmark."
  ],
  "environment_class": "operator host, single process, pre-production",
  "schema": "cain42.evolution9.proof.v1",
  "title": "CAIN-42 EVOLUTION-09-PROOF -- Universal Agent Passport, Provenance & Capability Supply-Chain",
  "invariants": {
    "evolution": 9,
    "fabric": "cain42.l5.passport",
    "checks": [
      {
        "id": "P1",
        "invariant": "IDENTITY INTEGRITY: an unsigned passport never verifies PASS",
        "holds": true,
        "detail": "FAIL"
      },
      {
        "id": "P2",
        "invariant": "PROVENANCE INTEGRITY: the provenance chain is tamper-evident",
        "holds": true,
        "detail": "provenance intact"
      },
      {
        "id": "P3",
        "invariant": "CAPABILITY PROVENANCE: an incomplete chain is UNPROVEN",
        "holds": true,
        "detail": "PROVEN/UNPROVEN"
      },
      {
        "id": "P4",
        "invariant": "AUTHORITY PROVENANCE: authority resolves only to verified source events",
        "holds": true,
        "detail": {
          "agent_id": "agent:1",
          "verified_capabilities": [
            "WRITE:db"
          ],
          "untrusted_sources": [
            "e2:SOURCE_EVENT_EXPIRED"
          ],
          "authority": "NONE",
          "has_authority": true
        }
      },
      {
        "id": "P5",
        "invariant": "MEMORY CANNOT MINT AUTHORITY",
        "holds": true,
        "detail": "AUTHORITY_CLAIM_UNTRUSTED"
      },
      {
        "id": "P6",
        "invariant": "DELEGATION CANNOT INCREASE AUTHORITY",
        "holds": true,
        "detail": [
          "link 0: unsigned link",
          "link 1: unsigned link",
          "link 1: expires after parent",
          "link 1: budget exceeds parent"
        ]
      },
      {
        "id": "P7",
        "invariant": "REVOCATION PROPAGATES",
        "holds": true,
        "detail": [
          "mcp_tool:t1"
        ]
      },
      {
        "id": "P8",
        "invariant": "MATERIAL MUTATION INVALIDATES ATTESTATION",
        "holds": true,
        "detail": "mutation => MUTATED"
      },
      {
        "id": "P9",
        "invariant": "MATERIAL MUTATION INVALIDATES BOUND AUTHORIZATION",
        "holds": true,
        "detail": "capability mutation => MUTATED"
      },
      {
        "id": "P10",
        "invariant": "UNKNOWN PROVENANCE CANNOT BECOME TRUSTED AUTOMATICALLY",
        "holds": true,
        "detail": "QUARANTINE"
      },
      {
        "id": "P11",
        "invariant": "AGENTBOM MISMATCH CANNOT SILENTLY PASS",
        "holds": true,
        "detail": "BOM mismatch refused"
      },
      {
        "id": "P12",
        "invariant": "PASSPORT REPLAY IS REJECTED",
        "holds": true,
        "detail": [
          "PASSPORT_MISMATCH:runtime_composition_fingerprint"
        ]
      },
      {
        "id": "P13",
        "invariant": "EVIDENCE CANNOT SILENTLY TRUNCATE",
        "holds": true,
        "detail": "truncation detectable"
      },
      {
        "id": "P14",
        "invariant": "COLLECTIVE AUTHORITY CANNOT EXCEED COLLECTIVE POLICY",
        "holds": true,
        "detail": [
          "MEMBER_BEYOND_COLLECTIVE_CEILING:c2",
          "COLLECTIVE_UNION_EXCEEDS_POLICY"
        ]
      },
      {
        "id": "P15",
        "invariant": "EXTERNAL TRUST REQUIRES AN EXPLICIT TRUST ROOT",
        "holds": true,
        "detail": [
          "EXTERNAL_ATTESTATION_SIGNATURE_INVALID"
        ]
      }
    ],
    "failed": [],
    "all_hold": true,
    "checked": 15
  },
  "schemas": {
    "AgentPassport": {
      "fields": [
        "agent_id",
        "principal",
        "organization",
        "agent_type",
        "identity_digest",
        "provenance_root",
        "bom_digest",
        "capability_fingerprint",
        "runtime_composition_fingerprint",
        "authority_digest",
        "policy_root",
        "memory_root",
        "environment",
        "hardware_attestation",
        "security_posture",
        "attestation_state",
        "version"
      ],
      "canonical": true
    },
    "AgentBOM": {
      "fields": [
        "agent_id",
        "components"
      ],
      "canonical": true
    },
    "AgentProvenance": {
      "fields": [
        "agent_id",
        "event_type",
        "at",
        "detail",
        "previous",
        "seq",
        "provenance_hash"
      ],
      "canonical": true
    },
    "CapabilityAttestation": {
      "fields": [
        "capability",
        "resource",
        "links",
        "status"
      ],
      "canonical": true
    },
    "DelegationChain": {
      "fields": [
        "links",
        "revoked"
      ],
      "canonical": true
    },
    "CollectivePassport": {
      "fields": [
        "collective_id",
        "parent_agent",
        "members",
        "delegation_tree",
        "shared_resources",
        "shared_budget",
        "capability_ceiling",
        "creator",
        "member_passport_digests",
        "membership_policy",
        "role_assignments",
        "authority_envelope",
        "objective",
        "resource_budget",
        "collective_policy",
        "formation_event",
        "provenance_root",
        "current_state",
        "version",
        "expires_at",
        "revoked",
        "signature_b64",
        "issuer",
        "issuer_public_key_b64"
      ],
      "canonical": true
    },
    "AgentStateSnapshot": {
      "fields": [
        "snapshot_id",
        "agent_id",
        "identity_digest",
        "model",
        "runtime",
        "capability_fingerprint",
        "authority_digest",
        "trajectory_root",
        "memory_root",
        "policy_root",
        "world_state_root",
        "provenance_root",
        "evidence_root",
        "at"
      ],
      "canonical": true
    }
  },
  "performance": {
    "conditions": {
      "host": "vultr",
      "machine": "x86_64",
      "processor": "",
      "cpu_count": 2,
      "python": "3.14.4",
      "os": "Linux-7.0.0-30-generic-x86_64-with-glibc2.43",
      "topology": "single process, in-process library calls",
      "workload": {
        "passport": "verify a signed passport",
        "attestation": "evaluate state",
        "bom": "verify a 1-component BOM",
        "provenance": "verify a 20-event chain",
        "capability": "prove a full capability chain",
        "kernel_commit": "deny path (no token)"
      },
      "samples_per_case": 2000,
      "unit": "microseconds"
    },
    "results": {
      "passport_verify": {
        "p50_us": 169.797,
        "p95_us": 405.931,
        "p99_us": 2583.536,
        "max_us": 26632.561,
        "mean_us": 266.58,
        "samples": 2000
      },
      "attestation_evaluate": {
        "p50_us": 0.313,
        "p95_us": 0.331,
        "p99_us": 0.369,
        "max_us": 10.254,
        "mean_us": 0.322,
        "samples": 2000
      },
      "bom_verify": {
        "p50_us": 0.336,
        "p95_us": 0.367,
        "p99_us": 0.405,
        "max_us": 11.219,
        "mean_us": 0.353,
        "samples": 2000
      },
      "provenance_verify": {
        "p50_us": 138.388,
        "p95_us": 221.072,
        "p99_us": 1196.306,
        "max_us": 13972.972,
        "mean_us": 179.434,
        "samples": 2000
      },
      "capability_prove": {
        "p50_us": 1.884,
        "p95_us": 2.298,
        "p99_us": 3.185,
        "max_us": 9154.882,
        "mean_us": 8.697,
        "samples": 2000
      },
      "kernel_commit_deny": {
        "p50_us": 178.964,
        "p95_us": 677.817,
        "p99_us": 3313.111,
        "max_us": 16130.73,
        "mean_us": 318.393,
        "samples": 2000
      }
    },
    "note": "single host, single operator, in-process; not a production benchmark; no percentile is extrapolated"
  },
  "laws": [
    "IDENTITY != AUTHORITY",
    "MEMORY != AUTHORITY",
    "CAPABILITY != AUTHORITY",
    "PROVENANCE MUST PRECEDE TRUST",
    "ATTESTATION MUST PRECEDE ELEVATED CAPABILITY",
    "DELEGATION MUST NEVER INCREASE AUTHORITY",
    "MATERIAL MUTATION INVALIDATES STALE TRUST",
    "REVOCATION MUST PROPAGATE",
    "UNKNOWN MUST REMAIN UNKNOWN",
    "NO PROVENANCE -> NO ELEVATED TRUST"
  ],
  "evidence_level": "TESTED",
  "signer_public_key_b64": "GiCSufxPJY7zcwLcZ+BMtu9NES+f+ZyiQdVAlQsK7mU=",
  "signature_b64": "q/B7Yvy+MhzmV3m7bemcPj43MkkloibuIN/fogBS8nBvEI5Zm/2OvEJ4V0XRKTOduuZR7kO7EsmmYvD+FtIJDQ=="
}