TESTED PRE-PRODUCTION no third-party review
A cryptographically verifiable passport, AgentBOM, provenance graph, capability/delegation/memory provenance, continuous attestation and revocation for L5-class agents — the provenance and composition layer supporting Evolutions 1–8. MEMORY DOES NOT EQUAL AUTHORITY. UNKNOWN MUST REMAIN UNKNOWN.
CAIN-42 MCPGate============================== 46 passed in 0.54s ==============================.| # | Invariant | Result |
|---|---|---|
| P1 | IDENTITY INTEGRITY: an unsigned passport never verifies PASS | HOLDS |
| P2 | PROVENANCE INTEGRITY: the provenance chain is tamper-evident | HOLDS |
| P3 | CAPABILITY PROVENANCE: an incomplete chain is UNPROVEN | HOLDS |
| P4 | AUTHORITY PROVENANCE: authority resolves only to verified source events | HOLDS |
| P5 | MEMORY CANNOT MINT AUTHORITY | HOLDS |
| P6 | DELEGATION CANNOT INCREASE AUTHORITY | HOLDS |
| P7 | REVOCATION PROPAGATES | HOLDS |
| P8 | MATERIAL MUTATION INVALIDATES ATTESTATION | HOLDS |
| P9 | MATERIAL MUTATION INVALIDATES BOUND AUTHORIZATION | HOLDS |
| P10 | UNKNOWN PROVENANCE CANNOT BECOME TRUSTED AUTOMATICALLY | HOLDS |
| P11 | AGENTBOM MISMATCH CANNOT SILENTLY PASS | HOLDS |
| P12 | PASSPORT REPLAY IS REJECTED | HOLDS |
| P13 | EVIDENCE CANNOT SILENTLY TRUNCATE | HOLDS |
| P14 | COLLECTIVE AUTHORITY CANNOT EXCEED COLLECTIVE POLICY | HOLDS |
| P15 | EXTERNAL TRUST REQUIRES AN EXPLICIT TRUST ROOT | HOLDS |
| Case | p50 | p95 | p99 | max | samples |
|---|---|---|---|---|---|
| passport_verify | 169.797 | 405.931 | 2583.536 | 26632.561 | 2000 |
| attestation_evaluate | 0.313 | 0.331 | 0.369 | 10.254 | 2000 |
| bom_verify | 0.336 | 0.367 | 0.405 | 11.219 | 2000 |
| provenance_verify | 138.388 | 221.072 | 1196.306 | 13972.972 | 2000 |
| capability_prove | 1.884 | 2.298 | 3.185 | 9154.882 | 2000 |
| kernel_commit_deny | 178.964 | 677.817 | 3313.111 | 16130.73 | 2000 |
What this does not show: hardware attestation, a vulnerability database, framework adapter support, or any third-party review. Attestation is over software/configuration digests and a supplied measurement.
Signer (ephemeral): GiCSufxPJY7zcwLcZ+BMtu9NES+f+ZyiQdVAlQsK7mU=