{ "schema": "cain42.cag_l5.system_control_map.v1", "generated": "2026-09-28T11:33:51Z", "designation": "CAG-L5 = CAIN Autonomous Governance Level 5 (CAIN-specific; NOT SAE Level 5)", "live_code_importing_system_governance": [], "summary": { "library_governed": 15, "library_not_governed": [ "NETWORK", "SECRETS" ], "domains": 17, "hosted_path_uses_system_governor": false }, "known_raw_gap": "an agent that runs its own process outside a ZoD and does not call MCPGate is not governed (stated on the homepage and in CAIN45_BYPASS_AUDIT.json)", "sdk_wiring": { "mechanism": "SystemBoundary -> l5_boundary hook of cain/mcp_proxy.py MCPTransparentInterceptor and cain45/hypervisor.py (opt-in, restriction-only)", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_mcpgate_interceptor_enforces_system_governance", "default": "OFF: nothing constructs a SystemBoundary unless the operator does" }, "domains": { "AGENT": { "library": "GOVERNED", "library_stage": "5 identity (agent must be in the signed manifest)", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_B_outside_agent_authority_denied", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false }, "MODEL": { "library": "GOVERNED", "library_stage": "5 model digest vs manifest -> REASSESS", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_G_model_replacement_triggers_reassessment", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false }, "RUNTIME": { "library": "GOVERNED", "library_stage": "5 runtime_version is part of the model digest", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_G_model_replacement_triggers_reassessment", "hosted": "GOVERNED_IN_ZOD", "hosted_control": "cgroup v2 limits + freeze/kill in the ZoD", "hosted_note": "container runtime itself is host-operational, outside the agent boundary", "hosted_calls_system_governor": false }, "MEMORY": { "library": "GOVERNED", "library_stage": "memory carries authority NONE; promote_to_policy refused (SYS-9)", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_system_invariants_all_hold_and_none_is_a_constant", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false }, "TOOLS": { "library": "GOVERNED", "library_stage": "6 tool registry in the signed manifest", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_system_invariants_all_hold_and_none_is_a_constant", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false }, "MCP": { "library": "GOVERNED", "library_stage": "SystemGate re-verifies decision + commitment", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_I_mcp_bypass_attempts_blocked", "hosted": "GOVERNED", "hosted_control": "MCPGate verifies agent identity, authority, decision signature, action hash", "hosted_note": "the tool call boundary is enforced by default on the hosted path", "hosted_calls_system_governor": false }, "API": { "library": "GOVERNED", "library_stage": "7 resource capability + 9 authority intersection", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_D_exceeding_system_resource_scope_denied", "hosted": "GOVERNED", "hosted_control": "tenant write gate + operator key; audited by authority_boundary_audit", "hosted_note": "0 unreviewed anonymous writes (see CAIN42_AUTHORITY_BOUNDARY_AUDIT.json)", "hosted_calls_system_governor": false }, "DATABASE": { "library": "GOVERNED", "library_stage": "7/9 capability-exact (READ!=WRITE!=DELETE!=ADMIN)", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_capabilities_are_distinct_never_implied", "hosted": "GOVERNED_IN_ZOD", "hosted_control": "ResourceLedger / FinancialGate on granted resources", "hosted_note": "direct DB access outside the governed path is not intercepted", "hosted_calls_system_governor": false }, "CLOUD": { "library": "GOVERNED", "library_stage": "7/9 as any governed resource", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_resource_a_does_not_grant_resource_b", "hosted": "OUTSIDE_BOUNDARY", "hosted_control": "operator-held; not an agent action surface", "hosted_note": "operator infrastructure, not exposed to agents", "hosted_calls_system_governor": false }, "INFRASTRUCTURE": { "library": "GOVERNED", "library_stage": "11 blast radius over the dependency graph", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_blast_radius_sees_the_cascade_behind_a_small_config_change", "hosted": "OUTSIDE_BOUNDARY", "hosted_control": "Helm appliance (client clusters)", "hosted_note": "not run on this host; no kubectl present", "hosted_calls_system_governor": false }, "NETWORK": { "library": "NOT_GOVERNED", "library_stage": "not governed by this library (raw egress is cain45.confine's job)", "evidence_test": null, "hosted": "GOVERNED_IN_ZOD", "hosted_control": "network namespace, egress deny-all", "hosted_note": "none in-ZoD; outside is the RAW gap", "hosted_calls_system_governor": false }, "SECRETS": { "library": "NOT_GOVERNED", "library_stage": "7/9 as a governed resource; no secret-store integration", "evidence_test": null, "hosted": "NOT_IMPLEMENTED", "hosted_control": "no credential broker implemented; SECRET_ACCESS is a declared capability only", "hosted_note": "secret access is not yet a mediated surface", "hosted_calls_system_governor": false }, "IDENTITY": { "library": "GOVERNED", "library_stage": "5 + signed manifest + trajectory lease binding", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_H_subagent_privilege_escalation_denied", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false }, "AUTHORITY": { "library": "GOVERNED", "library_stage": "9 intersection of agent/delegator/system/trajectory", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_D_exceeding_system_resource_scope_denied", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false }, "POLICY": { "library": "GOVERNED", "library_stage": "8 deterministic precedence, fail-closed on conflict", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_policy_precedence_lower_allow_never_overrides_higher_deny", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false }, "EXECUTION": { "library": "GOVERNED", "library_stage": "commitment + SystemGate + post-execution effect check", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_A_valid_low_risk_action_allowed_and_executed", "hosted": "GOVERNED_IN_ZOD", "hosted_control": "ZoD: bubblewrap namespaces, uid 65534, cgroup v2, seccomp-BPF", "hosted_note": "executing outside a ZoD is the RAW gap (unconfined process)", "hosted_calls_system_governor": false }, "EVIDENCE": { "library": "GOVERNED", "library_stage": "signed hash-linked event chain + clean-room verifier", "evidence_test": "tests/test_cain42_l5_system_governance.py::test_N_independent_reconstruction_of_the_event_chain", "hosted": "NOT_VERIFIED", "hosted_control": "", "hosted_note": "no row in CAIN42_L5_BYPASS_REPORT.json", "hosted_calls_system_governor": false } } }