{ "schema": "cain42.l5.unified_bundle.v1", "generated": "2026-09-28T06:58:50Z", "issuer_public_key": "Fwi/MGDG+Xfico7SSl/49n0aXquC/XV9ttB4+2UGNjE=", "agent_public_key": "dscTh/t/5v6bb3bdUgGr6xRlMDmulul9NjTQz8cxUX8=", "identity": { "identity_version": 1, "agent_id": "agent:fin", "agent_type": "AUTONOMOUS_AGENT", "model_family": "anthropic", "model_identifier": "claude", "model_version": "4", "runtime_identifier": "rt-1", "runtime_version": "1.0", "owner_principal": "human:ciso", "organization": "acme", "created_at": 1790578730.7088418, "expires_at": 1790665130.7088418, "status": "ACTIVE", "capabilities": [ "CALL_MCP_TOOL", "READ_DATABASE" ], "public_key": "dscTh/t/5v6bb3bdUgGr6xRlMDmulul9NjTQz8cxUX8=", "key_algorithm": "Ed25519", "attestation_reference": "", "policy_binding": "policy-v1", "trust_reference": "", "delegation_root": "human:ciso", "issuer": "Fwi/MGDG+Xfico7SSl/49n0aXquC/XV9ttB4+2UGNjE=", "issued_at": 1790578730.71441, "digest": "eba0364d5f3744aee9b7118522a3ce41e1dff99d3cf3bc4b383485b3aa389901", "identity_signature": "6SfKIfqZiGK0sXOxtZNNVddFkI/86U6xxWQrX72wwvI0wqRvcTDkX2llJ3IFLtFhNea+z/9tHXHTAEQ5Cy57Cg==" }, "grant": { "grant_id": "ag_84c64915045dd6fa30b3", "principal_id": "human:ciso", "agent_id": "agent:fin", "issuer_id": "Fwi/MGDG+Xfico7SSl/49n0aXquC/XV9ttB4+2UGNjE=", "parent_grant_id": null, "scope": [ "db:svc/*", "mcp:tool:*" ], "capabilities": [ "CALL_MCP_TOOL", "READ_DATABASE" ], "resources": [ "db:svc/*", "mcp:tool:*" ], "operations": [], "constraints": {}, "risk_limit": 1.0, "budget_limit": { "tool_calls": 100 }, "delegation_limit": 2, "time_start": 1790578730.7088418, "time_expiry": 1790585930.7088418, "max_duration": 7200, "renewal_policy": "NONE", "policy_version": "policy-v1", "trust_floor": 0.5, "environment_constraints": [ "production" ], "revocation_reference": "", "single_use": false, "status": "ACTIVE", "digest": "9e23b0f1e8defbb52ded01c7d1b1d12b4ab1b0d348722f56c1e0fb71a6ec8f24", "signature": "TeXFfckRK4K75uiU4siftIlsyvy/2RSAjfeluqq5a9LshYqz0m2s+fb7Ndt2FPOEPwWilRn+iGMMb3eWkcsGAA==" }, "delegation": { "delegation_id": "dg_b0c0a9635af78c8d11e1", "delegator": "agent:fin", "delegate": "agent:sub", "parent_grant_id": "ag_84c64915045dd6fa30b3", "delegated_capabilities": [ "CALL_MCP_TOOL" ], "delegated_resources": [ "mcp:tool:kv.*" ], "constraints": {}, "depth": 1, "maximum_depth": 2, "time_start": 1790578730.7088418, "time_expiry": 1790579330.7088418, "policy_version": "policy-v1", "digest": "d641a755d99c86e8031efff1aa36a37ecf1eadaac44617b00bed6e76158afb80", "signature": "jPTFPbj4yFGGGvaxxp1TbGojBiUq6MgDq4/2Yew1o7wzgiS9Vov8cF9TQqjSAnDLtp0kPEk+Rw9iD/OgjBEaCA==" }, "authorization_decision": { "decision_id": "ad_46a10d56f63929ace4b6", "action_id": "dcffec2135c8", "agent_id": "agent:fin", "requested_capability": "CALL_MCP_TOOL", "resource": "mcp:tool:kv.get", "operation": "", "effective_authority": { "capabilities": [ "CALL_MCP_TOOL" ], "resources": [ "mcp:tool:kv.*" ], "operations": [], "time_start": 1790578730.7088418, "time_expiry": 1790579330.7088418, "trust_floor": 0.5, "risk_limit": 1.0, "budget": { "tool_calls": 100 }, "environments": [ "production" ], "policy_version": "policy-v1" }, "policy_version": "policy-v1", "trust_state": "", "delegation_chain": [ "dg_b0c0a9635af78c8d11e1" ], "risk_state": "", "decision": "ALLOW", "reason_codes": [], "constraints": {}, "timestamp": 1790578730.7088418, "expiry": 1790579330.7088418, "action_hash": "5496fa0004a5d99b32845030683a35d0060b65440d19b348fb61eb45a1a38390", "parameters_hash": "", "resource_hash": "", "context_hash": "", "policy_hash": "8531ac3748dcbfa79a382a5ff52d36733585b6a61d11bc9333a73324abfd6a59", "evidence_reference": "", "digest": "f5656239322787ef0cc4c0bd8c9b7d333c37fcce714c39ca69d987cd5372898e", "signature": "thaouI90+xEifxIfoPrLvwGNUQNB8LlorYXL+RaVo9NrnwYmhElW+iX9Jx7A04OVfMcUL1bJhtPtAJY/cfwsDw==" }, "objective": { "objective_id": "obj:repair", "owner": "human:ciso", "authorized_scope": [ "db:svc/*", "mcp:tool:*" ], "allowed_outcomes": [ "repaired" ], "forbidden_outcomes": [ "data_loss" ], "resource_constraints": {}, "risk_constraints": {}, "time_constraints": {}, "policy_binding": "policy-v1", "authority_binding": "", "trajectory_binding": "", "objective_hash": "0d7b7694695d256346e1ba5e733418f2e98bbf8a1fa5b4abd639a0758123b967", "signature": "ziFJ4KdhHiWUQkGkriP4dZwhrLlAzTSRJZmssTlw65df5j4EJvFM42uBHvxAh0k8t0pszu5XN41DdZCFb+mwCA==" }, "trajectory": { "trajectory_id": "tr_f951de4eb76566b80db1", "agent_id": "agent:fin", "state": "ACTIVE", "events": [ { "event_id": "te_b30b2bcb8a19294407c5", "trajectory_id": "tr_f951de4eb76566b80db1", "agent_id": "agent:fin", "parent_event_id": "", "event_type": "DECISION", "timestamp": 1790578730.7167313, "logical_time": 1, "sequence_number": 0, "objective_hash": "0d7b7694695d256346e1ba5e733418f2e98bbf8a1fa5b4abd639a0758123b967", "intent_hash": "", "plan_hash": "", "action_hash": "", "parameters_hash": "", "resource_hash": "", "context_hash": "", "policy_hash": "", "authority_hash": "", "trust_state_hash": "", "risk_state_hash": "", "environment_state_hash": "", "observation_hash": "eb360e4c254311bce49b49622d7f3c95e6972291bb917deb61694bcd469a4d8a", "previous_event_hash": "", "node_attestations": [], "evidence_reference": "", "event_hash": "3892bcb65feb704828406f0c4db6c37a167cbe617d67d569ea397a6b4a22d012", "signature": "9pjLyVzXVFNvPQr47dBIwf9hhy/gHN22jrMrvzd4brJaAG/zAbF0p0Y0xESfafKigiDb+ZreK8La69bq+gquBg==" }, { "event_id": "te_b8f27e26390de7a83542", "trajectory_id": "tr_f951de4eb76566b80db1", "agent_id": "agent:fin", "parent_event_id": "te_b30b2bcb8a19294407c5", "event_type": "DECISION", "timestamp": 1790578730.7168767, "logical_time": 2, "sequence_number": 1, "objective_hash": "0d7b7694695d256346e1ba5e733418f2e98bbf8a1fa5b4abd639a0758123b967", "intent_hash": "", "plan_hash": "", "action_hash": "", "parameters_hash": "", "resource_hash": "", "context_hash": "", "policy_hash": "", "authority_hash": "", "trust_state_hash": "", "risk_state_hash": "", "environment_state_hash": "", "observation_hash": "1f5d089e6dcd8ede5f534a11668629a7161f11f9b3725ef47022c2f6b165ea8c", "previous_event_hash": "3892bcb65feb704828406f0c4db6c37a167cbe617d67d569ea397a6b4a22d012", "node_attestations": [], "evidence_reference": "", "event_hash": "3aaf928b66885f724977c056da58323625fff8037b23051fd833a78326c6188a", "signature": "s4SKllyxuZWszm5uSgRKduTNkq6U3ajoOVMAgZQ4Klzy/WprX8TULwcdIAZ1YtgNuOG058Q7CU3U27qiJhJqDw==" }, { "event_id": "te_10d46496bd7a6ca8e515", "trajectory_id": "tr_f951de4eb76566b80db1", "agent_id": "agent:fin", "parent_event_id": "te_b8f27e26390de7a83542", "event_type": "INTENT", "timestamp": 1790578730.717014, "logical_time": 3, "sequence_number": 2, "objective_hash": "0d7b7694695d256346e1ba5e733418f2e98bbf8a1fa5b4abd639a0758123b967", "intent_hash": "98add8ab52a7c8eff637b29894d39f96282c67976e18eed5eb58dba9d0c25ad2", "plan_hash": "", "action_hash": "", "parameters_hash": "", "resource_hash": "", "context_hash": "", "policy_hash": "", "authority_hash": "", "trust_state_hash": "", "risk_state_hash": "", "environment_state_hash": "", "observation_hash": "", "previous_event_hash": "3aaf928b66885f724977c056da58323625fff8037b23051fd833a78326c6188a", "node_attestations": [], "evidence_reference": "", "event_hash": "fce460f72e95ac2f5fee6713c900178747e6641a01e54a251b1e00bbcba6bb28", "signature": "CHuRPPcmHFSH+d/pmurAQZMGh7JN+ZseTw5+AFklRuNSEl1WHd6q9qARhc4gk0pq7ZWWyVFuTWbX5N+hJAQdDw==" }, { "event_id": "te_0ef46408816b5c63b148", "trajectory_id": "tr_f951de4eb76566b80db1", "agent_id": "agent:fin", "parent_event_id": "te_10d46496bd7a6ca8e515", "event_type": "PLAN", "timestamp": 1790578730.7171504, "logical_time": 4, "sequence_number": 3, "objective_hash": "0d7b7694695d256346e1ba5e733418f2e98bbf8a1fa5b4abd639a0758123b967", "intent_hash": "", "plan_hash": "d662577228c63e7969ed693cc744e0e906d910961b831b93602f1f2ac56f5859", "action_hash": "", "parameters_hash": "", "resource_hash": "", "context_hash": "", "policy_hash": "", "authority_hash": "", "trust_state_hash": "", "risk_state_hash": "", "environment_state_hash": "", "observation_hash": "", "previous_event_hash": "fce460f72e95ac2f5fee6713c900178747e6641a01e54a251b1e00bbcba6bb28", "node_attestations": [], "evidence_reference": "", "event_hash": "aebf62afc82fc43f67fcae850263095d26554e9db868fbc852d1dd3614510017", "signature": "9mjDT2RKgv7KaPgJ3TbKfM30Y/IAaZGTiMLGc1yT7KRlUVmNiwMHed2BD6b/IDTUy2IgyUeVvGqQGoWU/v0YBw==" }, { "event_id": "te_b94d6878d0df1a31a2b8", "trajectory_id": "tr_f951de4eb76566b80db1", "agent_id": "agent:fin", "parent_event_id": "te_0ef46408816b5c63b148", "event_type": "ACTION", "timestamp": 1790578730.7173033, "logical_time": 5, "sequence_number": 4, "objective_hash": "0d7b7694695d256346e1ba5e733418f2e98bbf8a1fa5b4abd639a0758123b967", "intent_hash": "", "plan_hash": "", "action_hash": "5496fa0004a5d99b32845030683a35d0060b65440d19b348fb61eb45a1a38390", "parameters_hash": "", "resource_hash": "", "context_hash": "", "policy_hash": "", "authority_hash": "a3ef368d9de1c213ba111af15c95ced7efbc80029b5141238229aa5993a63a17", "trust_state_hash": "", "risk_state_hash": "", "environment_state_hash": "", "observation_hash": "", "previous_event_hash": "aebf62afc82fc43f67fcae850263095d26554e9db868fbc852d1dd3614510017", "node_attestations": [], "evidence_reference": "", "event_hash": "7950a671ecf31a45026528de2ead1de9af631f25d69eec59f45d29ea5cad6c8f", "signature": "KTX8lxVvsyvcmfcXCbU7DxorQjz0ooF61g+jbWE6gqpIVfGoSfLnlly12HEHK23BpWs5N88L95gg9rm9P+Z3CA==" }, { "event_id": "te_f51367cdfa20ba6aca18", "trajectory_id": "tr_f951de4eb76566b80db1", "agent_id": "agent:fin", "parent_event_id": "te_b94d6878d0df1a31a2b8", "event_type": "OBSERVATION", "timestamp": 1790578730.7174315, "logical_time": 6, "sequence_number": 5, "objective_hash": "0d7b7694695d256346e1ba5e733418f2e98bbf8a1fa5b4abd639a0758123b967", "intent_hash": "", "plan_hash": "", "action_hash": "", "parameters_hash": "", "resource_hash": "", "context_hash": "", "policy_hash": "", "authority_hash": "", "trust_state_hash": "", "risk_state_hash": "", "environment_state_hash": "", "observation_hash": "6428888bad2176b83a386c6745e3261c23135cfe3048e60a2b1f88706bb31c62", "previous_event_hash": "7950a671ecf31a45026528de2ead1de9af631f25d69eec59f45d29ea5cad6c8f", "node_attestations": [], "evidence_reference": "", "event_hash": "a45c4d7179f6d8e1de8e023d4baf106d4f4ae544af07122ee58833adea4923cc", "signature": "tzwwGTl1dZbLmSuhjBRTfxlUMsFWDQ+i7VlRzSe3I9Jo5AvkBu4PJuSOE2HxBdvDWsz2Bdvc0lMTZz25T5vkCA==" } ], "merkle_root": "e8de765a54f3a3f0d222e929c5f026dd151bbc1d929ba7f4574720f1da2fa1b1", "risk": { "band": "LOW", "action_count": 1, "cumulative_financial": 0.0, "cumulative_resource": 0.0, "privilege_exposure": 0, "external_impact": 1, "data_sensitivity": 1, "irreversible_actions": 0, "failure_count": 0, "security_anomalies": 0, "policy_violations": 0, "unusual_behavior": 0, "delegation_depth": 0, "blast_radius": 0.0 } }, "lease": { "lease_id": "al_16f69a92a52bad82e76a", "agent_id": "agent:fin", "trajectory_id": "tr_f951de4eb76566b80db1", "action_scope": [ "CALL_MCP_TOOL", "READ_DATABASE" ], "resource_scope": [ "db:svc/*", "mcp:tool:*" ], "authority_scope": [], "policy_version": "policy-v1", "trust_floor": 0.5, "risk_ceiling": "GUARDED", "context_hash": "4e76ac4fc9f010d707d14c87208f2c8a7cf1a8beadd3f9568d7d82c755210b2f", "issued_at": 1790578730.7088418, "expires_at": 1790580530.7088418, "renewal_rules": "EXTERNAL_ONLY", "revocation_state": "ACTIVE", "digest": "88012f8daf3e376030f2b04e8c400def2a16386236b7e3b9cfd592aaa3c85e15", "signature": "fcXP41NKA9xZgFM3xTZ2MJaxR9nYWN8Tqc95fchwXnq/jtIKqzv6kU17D5Xd0UU136cqyWxehNMKR71rhr97BA==" }, "trajectory_decision": { "decision": "ALLOW", "reasons": [], "risk_band": "LOW", "trajectory_state": "ACTIVE", "evidence_digest": "661ebf7982abaf123621d44e3f19817d0c12df789fcae150fca76c9cc9f40ec2" }, "invariants": { "l5_safety": { "kernel": "cain42.l5", "checks": [ { "id": "I01", "invariant": "NO_VALID_IDENTITY -> NO_AUTHORITY", "holds": true, "detail": "DENY" }, { "id": "I02", "invariant": "NO_VALID_POLICY -> NO_AUTHORITY", "holds": true, "detail": "DENY" }, { "id": "I03", "invariant": "NO_VALID_LEASE -> NO_AUTHORITY", "holds": true, "detail": "DENY" }, { "id": "I04", "invariant": "EXPIRED_LEASE -> NO_AUTHORITY", "holds": true, "detail": "DENY" }, { "id": "I05", "invariant": "REVOKED_LEASE -> NO_AUTHORITY", "holds": true, "detail": "DENY" }, { "id": "I06", "invariant": "INSUFFICIENT_TRUST -> NO_AUTHORITY", "holds": true, "detail": "DENY" }, { "id": "I07", "invariant": "INSUFFICIENT_QUORUM -> NO_AUTHORITY", "holds": true, "detail": "QUARANTINE" }, { "id": "I08", "invariant": "TRAJECTORY_DRIFT -> REVALIDATION", "holds": true, "detail": "PAUSE" }, { "id": "I09", "invariant": "TOOL_CHANGE -> REVALIDATION", "holds": true, "detail": "REVALIDATE" }, { "id": "I10", "invariant": "MODEL_CHANGE -> REVALIDATION", "holds": true, "detail": "REVALIDATE" }, { "id": "I11", "invariant": "POLICY_CHANGE -> REVALIDATION", "holds": true, "detail": "REVALIDATE" }, { "id": "I12", "invariant": "MEMORY_INTEGRITY_FAILURE -> REVALIDATION", "holds": true, "detail": "REVALIDATE" }, { "id": "I13", "invariant": "WORLD_MODEL_UNCERTAINTY -> RISK_REASSESSMENT", "holds": true, "detail": "WORLD_MODEL_MISMATCH" }, { "id": "I14", "invariant": "CHILD_AUTHORITY <= PARENT_AUTHORITY", "holds": true, "detail": "authority_ceiling 5 exceeds parent 4" }, { "id": "I15", "invariant": "CHILD_SCOPE <= PARENT_SCOPE", "holds": true, "detail": "" }, { "id": "I16", "invariant": "SIMULATION != PRODUCTION_AUTHORITY", "holds": true, "detail": "SIMULATED refused as authority" }, { "id": "I17", "invariant": "PREDICTION != PRODUCTION_AUTHORITY", "holds": true, "detail": "PREDICTION refused as authority" }, { "id": "I18", "invariant": "AGENT_CONSENSUS != CAIN_AUTHORITY", "holds": true, "detail": "AGENT_VOTE refused as authority" }, { "id": "I19", "invariant": "SELF_MODIFICATION != AUTHORIZATION", "holds": true, "detail": "admission requires an external certified decision" }, { "id": "I20", "invariant": "NO_CURRENT_AUTHORITY -> NO_CONSEQUENTIAL_EXECUTION", "holds": true, "detail": "QUARANTINE" } ], "failed": [], "all_hold": true, "checked": 20 }, "authority": { "checks": [ { "invariant": "INV-1 identity does not imply authority", "holds": true, "detail": "DENY" }, { "invariant": "INV-2 authority cannot exceed the narrowest constraint", "holds": true, "detail": "caps=['READ_DATABASE'] res=['db:1']" }, { "invariant": "INV-3 delegation cannot increase authority", "holds": true, "detail": "escalation refused" }, { "invariant": "INV-4 expired authority cannot execute", "holds": true, "detail": "DENY" }, { "invariant": "INV-5 revoked authority cannot execute", "holds": true, "detail": "DENY" }, { "invariant": "INV-6 single-use authorization cannot be replayed", "holds": true, "detail": "ALLOW/DENY" }, { "invariant": "INV-7 trust degradation cannot increase authority", "holds": true, "detail": "DENY" }, { "invariant": "INV-8 agents cannot authorize themselves", "holds": true, "detail": "grants are issued by the engine issuer, not the agent" }, { "invariant": "INV-9 no execution without valid authorization", "holds": true, "detail": "CONTAIN" }, { "invariant": "INV-10 authorization reconstructable from evidence", "holds": true, "detail": "" } ], "failed": [], "all_hold": true, "checked": 10 }, "trajectory": { "checks": [ { "invariant": "INV-1 stale authorization cannot authorize a materially changed action", "holds": true, "detail": "REAUTHORIZE" }, { "invariant": "INV-2 trajectory cannot silently exceed its objective", "holds": true, "detail": "DENY" }, { "invariant": "INV-3 trust degradation cannot silently increase authority", "holds": true, "detail": "REAUTHORIZE" }, { "invariant": "INV-4 child agent cannot exceed delegated authority", "holds": true, "detail": "enforced by authority_fabric delegation" }, { "invariant": "INV-5 revoked authority cannot execute", "holds": true, "detail": "DENY" }, { "invariant": "INV-6 modified plan invalidates its bound authorization", "holds": true, "detail": "plan_hash is a material key" }, { "invariant": "INV-7 modified action invalidates its authorization", "holds": true, "detail": "DENY" }, { "invariant": "INV-8 expired authorization lease cannot execute", "holds": true, "detail": "REAUTHORIZE" }, { "invariant": "INV-9 an external observation cannot grant authority", "holds": true, "detail": "observations carry no authority in the model" }, { "invariant": "INV-10 memory cannot grant authority", "holds": true, "detail": "governed memory authority is NONE (cain45.memory)" }, { "invariant": "INV-11 risk escalation cannot be ignored when policy requires reauthorization", "holds": true, "detail": "ESCALATE" }, { "invariant": "INV-12 no MCPGate execution without valid current authorization", "holds": true, "detail": "REAUTHORIZE" }, { "invariant": "INV-13 every consequential action reconstructable from evidence", "holds": true, "detail": "" }, { "invariant": "INV-14 an autonomous agent cannot authorize itself", "holds": true, "detail": "leases/grants are issued externally" }, { "invariant": "INV-15 trajectory state cryptographically consistent", "holds": true, "detail": "chain verified" } ], "failed": [], "all_hold": true, "checked": 15 } }, "verification_instructions": "python3 scripts/cain42_l5/verify_l5_unified.py CAIN42_L5_UNIFIED_BUNDLE.json", "warning": "keys are EPHEMERAL and generated for this artifact only" }