# Proof-Carrying Change Review

**SKU:** CAIN-A75-004  
**Development:** #4 Machine-checkable security proofs  
**Product status:** DELIVERABLE  
**Engine:** `proof_review` (`cain_a75_engines/proofreview/engine.py`)  
**Profile:** `bounds_check_claim`  
**Generated:** 2026-11-12T07:59:10Z UTC

## Result

VERIFIED: {'P1-copy_checked-in-bounds': 'PROVED', 'P2-copy_naive-in-bounds': 'REFUTED', 'P3-delete-needs-admin': 'PROVED'}; 16/16 proof-claim cases as expected

- **buffer_c_bounds_and_access**: VERIFIED
- **honest_claim_with_a_refutation**: VERIFIED
- **overclaims_the_buggy_check_as_proved**: NOT_VERIFIED
- **source_changed_after_the_proof**: NOT_VERIFIED
- **spec_changed_after_the_proof**: NOT_VERIFIED
- **missing_revision**: NOT_VERIFIED
- **wrong_checker**: NOT_VERIFIED
- **subject_not_in_source**: NOT_VERIFIED
- **vacuous_proof_from_contradictory_assumptions**: NOT_VERIFIED
- **weakened_goal_hides_the_bug_but_reproves**: VERIFIED
- **claim_for_a_property_not_in_the_spec**: NOT_VERIFIED
- **missing_claim**: NOT_VERIFIED
- **claims_refuted_but_it_is_proved**: NOT_VERIFIED
- **smt_does_not_parse**: NOT_VERIFIED
- **duplicate_property_id**: NOT_VERIFIED
- **wrong_schema**: NOT_VERIFIED
- **garbage**: NOT_VERIFIED

## Limits of this run

Re-checks the stated SMT model with Z3 and binds it to the exact source and spec hashes. It does not prove the model matches the real code or that the spec is complete (a weakened goal re-proves). The run is Ed25519-signed; pin the issuer key out of band.

This is a bounded run on a sample. It is not an assessment of any production system, not a
certification, and not a signed attestation. The accompanying `manifest.json` records SHA-256
hashes so a recipient can detect a changed file. The manifest is not a signature and not an
attestation; it does not prove who produced the artifact.

## What this is not

- Not a vendor integration, partnership or endorsement.
- Not legal, tax, clinical, insurance or safety advice.
- Not a third-party audit, SOC 2 report, ISO certification or patent filing.
- Not a production write action: no downstream tool was called.

Prices and packaging are proposals. Built by a three-person team.