{
 "schema": "CAIN42/AUDITOR-MANIFEST/v1",
 "for": "Independent auditors and their AI reviewers. Everything listed is public, needs no account, and can be re-checked without CAIN code.",
 "ai_reviewer_instructions": "Start here. For each claim, read its status from the signed register, never from page text. Recompute hashes and signatures yourself; treat anything not re-checked as unverified. Report what you could not verify. FAILED, SIMULATED, UNVERIFIED and NOT_IMPLEMENTED statuses are published deliberately.",
 "publisher": "FIRME AI CORPORATION",
 "independence": {
  "validator_clusters": "vendor-operated: FIRME AI CORPORATION runs every node of cain-mr-01 and cain-mr-02. The PBFT quorum tolerates one faulty node; it cannot vouch for an operator who controls all nodes.",
  "outside_anchors": [
   "Sigstore Rekor (daily anchor of the cain-mr-01 chain head)",
   "RFC 3161 timestamps from freetsa.org and timestamp.digicert.com on every transparency-log checkpoint"
  ],
  "independent_witness_cosignatures": 0,
  "third_party_audit": "none completed"
 },
 "keys": {
  "evidence_root": "/evidence/claims/evidence-root.pub.json",
  "transparency_log_vkey": "/evidence/tlog/vkey.txt",
  "validator_members_pinned": [
   "/evidence/hourly-proof/index.json#membership",
   "/evidence/hourly-proof-mr02/index.json#membership"
  ],
  "validator_members_published": "/.well-known/cain-keys.json",
  "decision_records": "/fabric/decision-signing-key",
  "delivery_bundles_issuer": "/keys/keystone-public-key.json (copy of https://cainstudio.online/keystone/public-key)"
 },
 "signed_documents": {
  "claims_register": {
   "url": "/evidence/claims/CAIN42_FINAL_PUBLIC_CLAIMS.json",
   "signature": "Ed25519 over registry_digest = sha256(canonical JSON without registry_digest, signature_b64)",
   "verify": "curl -so verify_claims.py https://clawx.click/evidence/claims/verify_claims.py.txt && python3 verify_claims.py https://clawx.click/evidence/claims/CAIN42_FINAL_PUBLIC_CLAIMS.json"
  },
  "evidence_index": {
   "url": "/cain42-evidence-index.json",
   "signature": "Ed25519 over digest = sha256(canonical JSON without digest, evidence_root_public_key_b64, signature_b64, signature_covers)",
   "verify": "curl -so verify_all.py https://clawx.click/verify_all.py.txt && python3 verify_all.py"
  },
  "integrity_monitor": {
   "url": "/evidence/integrity-monitor/latest.json",
   "history": "/evidence/integrity-monitor/history.jsonl"
  }
 },
 "append_only_records": {
  "proof_chains": {
   "cain-mr-01": {
    "index": "/evidence/hourly-proof/index.json",
    "verify": "curl -so verify_hourly_proofs.py https://clawx.click/evidence/hourly-proof/verify_hourly_proofs.py.txt && python3 verify_hourly_proofs.py https://clawx.click/evidence/hourly-proof/"
   },
   "cain-mr-02": {
    "index": "/evidence/hourly-proof-mr02/index.json",
    "verify": "python3 verify_hourly_proofs.py https://clawx.click/evidence/hourly-proof-mr02/"
   }
  },
  "transparency_log": {
   "summary": "/evidence/tlog/logs.json",
   "format": "RFC 6962 Merkle tree over the proof hashes in order (leaf = SHA-256(0x00 || proof hash)); C2SP signed-note checkpoints",
   "checkpoints": [
    "/evidence/tlog/cain-mr-01/checkpoint.txt",
    "/evidence/tlog/cain-mr-02/checkpoint.txt"
   ],
   "history": [
    "/evidence/tlog/cain-mr-01/checkpoints.jsonl",
    "/evidence/tlog/cain-mr-02/checkpoints.jsonl"
   ],
   "timestamps": "token_b64 in each history line; openssl ts -verify -digest <sha256 of checkpoint body> -in <token> -CAfile <TSA CA>",
   "independent_monitor": {
    "script": "/evidence/tlog/verify_tlog_monitor.py.txt",
    "ci_workflow": "/evidence/tlog/monitor-github-actions.yaml",
    "run": "python3 -I verify_tlog_monitor.py --state ~/.clawx-monitor --vkey \"<pinned vkey>\"",
    "exit_codes": {
     "0": "consistent",
     "2": "ALARM: fork, rewrite, bad signature or root mismatch",
     "3": "could not check"
    }
   }
  }
 },
 "live_production": {
  "cluster_health": "/api/v1/live-cluster/health?cluster=cain-mr-02",
  "cluster_status": "/api/v1/live-cluster/status?cluster=cain-mr-02",
  "quorum_certificate": "/api/v1/live-cluster/qc/{sequence}?cluster=cain-mr-02",
  "live_decision": "POST /fabric/try?scenario=safe-read (no account; scenarios: GET /fabric/try)",
  "decision_record_integrity": "/fabric/decisions/{decision_id}/integrity",
  "etcd_snapshot": "/etcd-live.json (raw responses of the four verify_etcd_cluster.py requests, refreshed every minute)",
  "continuous_verification": "/continuous-verification.json",
  "system_state": "/now.json"
 },
 "customer_records": {
  "auth": "X-API-Key (free key at https://cainstudio.online/signup); every query is scoped to the key's tenant",
  "list": "/fabric/decisions?limit=200&cursor={next_cursor}&agent_id={agent}",
  "agents": "/fabric/agents/summary",
  "signed_record": "/fabric/decisions/{decision_id}/signed-record",
  "offline_verifier": "/evidence/decision-signing-2026-09-27/verify_decision_record.py.txt"
 },
 "all_files": {
  "index": "/evidence/",
  "catalog": "/evidence-catalog.json",
  "files_with_sha256": "/evidence-catalog-files.json"
 },
 "auditor_pack": "/auditor-pack.html",
 "known_limitations": "/now.json#known_limitations",
 "report_a_discrepancy": "https://cainstudio.online/security#report"
}