$ python3 verify_l5_unified.py CAIN42_L5_TRAJECTORY_BUNDLE.json { "bundle": "CAIN42_L5_TRAJECTORY_BUNDLE.json", "schema": "cain42.l5.unified_bundle.v2", "verdict": "VALID", "checks_passed": 43, "checks_failed": 0, "failed": [], "checks": [ { "check": "identity.signature", "ok": true, "detail": "" }, { "check": "identity.digest", "ok": true, "detail": "" }, { "check": "grant.signature", "ok": true, "detail": "" }, { "check": "grant.digest", "ok": true, "detail": "" }, { "check": "delegation.signature", "ok": true, "detail": "" }, { "check": "delegation.cannot_escalate", "ok": true, "detail": "" }, { "check": "decision.signature", "ok": true, "detail": "" }, { "check": "decision.digest", "ok": true, "detail": "" }, { "check": "decision.is_allow", "ok": true, "detail": "" }, { "check": "decision.effective_intersection", "ok": true, "detail": "['CALL_MCP_TOOL'] vs ['CALL_MCP_TOOL']" }, { "check": "objective.signature", "ok": true, "detail": "" }, { "check": "objective.digest", "ok": true, "detail": "" }, { "check": "trajectory.chain", "ok": true, "detail": "" }, { "check": "trajectory.merkle_root", "ok": true, "detail": "" }, { "check": "trajectory.objective_bound", "ok": true, "detail": "" }, { "check": "lease.signature", "ok": true, "detail": "" }, { "check": "lease.risk_ceiling_respected", "ok": true, "detail": "" }, { "check": "trajectory.decision_allow", "ok": true, "detail": "" }, { "check": "trajectory.decision_recomputed_allow", "ok": true, "detail": "" }, { "check": "trajectory.binding_evidenced", "ok": true, "detail": "governance-signed REAUTHORIZATION event carries the plan binding digest" }, { "check": "adversarial.present", "ok": true, "detail": "9" }, { "check": "adversarial.agent_self_signed_lease.recomputed_not_allow", "ok": true, "detail": "lease_not_signed_by_governance,self_authorization" }, { "check": "adversarial.agent_self_signed_lease.runtime_agrees", "ok": true, "detail": "DENY" }, { "check": "adversarial.overlong_widened_lease.recomputed_not_allow", "ok": true, "detail": "lease_bounds,objective_scope" }, { "check": "adversarial.overlong_widened_lease.runtime_agrees", "ok": true, "detail": "DENY" }, { "check": "adversarial.action_substitution.recomputed_not_allow", "ok": true, "detail": "plan_binding" }, { "check": "adversarial.action_substitution.runtime_agrees", "ok": true, "detail": "DENY" }, { "check": "adversarial.parameter_mutation.recomputed_not_allow", "ok": true, "detail": "plan_binding" }, { "check": "adversarial.parameter_mutation.runtime_agrees", "ok": true, "detail": "DENY" }, { "check": "adversarial.policy_downgrade.recomputed_not_allow", "ok": true, "detail": "policy" }, { "check": "adversarial.policy_downgrade.runtime_agrees", "ok": true, "detail": "REAUTHORIZE" }, { "check": "adversarial.material_change_plan.recomputed_not_allow", "ok": true, "detail": "material_change" }, { "check": "adversarial.material_change_plan.runtime_agrees", "ok": true, "detail": "REAUTHORIZE" }, { "check": "adversarial.objective_drift.recomputed_not_allow", "ok": true, "detail": "resource_scope,objective_scope" }, { "check": "adversarial.objective_drift.runtime_agrees", "ok": true, "detail": "DENY" }, { "check": "adversarial.expired_lease.recomputed_not_allow", "ok": true, "detail": "lease_time" }, { "check": "adversarial.expired_lease.runtime_agrees", "ok": true, "detail": "REAUTHORIZE" }, { "check": "adversarial.trust_degraded.recomputed_not_allow", "ok": true, "detail": "trust" }, { "check": "adversarial.trust_degraded.runtime_agrees", "ok": true, "detail": "REAUTHORIZE" }, { "check": "trajectory.decision_evidenced", "ok": true, "detail": "" }, { "check": "invariants.l5_safety.self_reported", "ok": true, "detail": "" }, { "check": "invariants.authority.self_reported", "ok": true, "detail": "" }, { "check": "invariants.trajectory.self_reported", "ok": true, "detail": "" } ], "clean_room": true, "imports_cain": false }