{
  "created_at": "2026-11-12T07:59:12Z",
  "result": {
    "engine": "enterprise_governance",
    "limits": "Reviews the supplied governance record. It does not inspect the live fleet, verify control evidence, or prove the agents behave as documented. The run is Ed25519-signed; pin the issuer key out of band.",
    "module": "cain_a75_engines/enterprisegov/engine.py",
    "profile": "two_agent_fleet",
    "run": {
      "label": "Recomputes enterprise agent governance: ownership and review age, required controls, scoped exceptions, high-risk policy enforcement, governance authority and claim honesty. It does not inspect the live fleet.",
      "public_key_b64": "6Jev2AJNK2FX0i4zOxT0xoKey3Qu/6v9CLUGCSXxv1E=",
      "records": [
        {
          "checks": [
            {
              "detail": "a governance body is named",
              "id": "authority.body",
              "ok": true
            },
            {
              "detail": "the policy revision is named by hash",
              "id": "authority.policy_hash",
              "ok": true
            },
            {
              "detail": "a high-risk policy is not switched off",
              "id": "policy.PII-ENFORCE.not_off",
              "ok": true
            },
            {
              "detail": "policy does not cover a high-risk class",
              "id": "policy.OPS-LOG.not_off",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-crm.identity",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-crm.logging",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-crm.data_boundary",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-crm.kill_switch",
              "ok": true
            },
            {
              "detail": "reviewed 20 days ago, max 90.0",
              "id": "agent-crm.review_current",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-ops.identity",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-ops.logging",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-ops.data_boundary",
              "ok": true
            },
            {
              "detail": "pass",
              "id": "agent-ops.kill_switch",
              "ok": true
            },
            {
              "detail": "reviewed 35 days ago, max 90.0",
              "id": "agent-ops.review_current",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.all_agents_reviewed",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.all_controls_active",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.no_high_risk_policy_off",
              "ok": true
            }
          ],
          "created_at": "2026-11-12T07:59:12Z",
          "engine": "a75-018/1.0.0",
          "extra": {
            "agents": {
              "agent-crm": {
                "data_classes": [
                  "pii"
                ],
                "environment": "prod"
              },
              "agent-ops": {
                "data_classes": [
                  "internal"
                ],
                "environment": "prod"
              }
            },
            "computed": {
              "all_agents_reviewed": true,
              "all_controls_active": true,
              "no_high_risk_policy_off": true
            },
            "exceptions": []
          },
          "failed": [],
          "label": "Recomputes enterprise agent governance: ownership and review age, required controls, scoped exceptions, high-risk policy enforcement, governance authority and claim honesty. It does not inspect the live fleet.",
          "prev_record_hash": "ee5a602318b635495c47252adc17317a4f0b49ec06b15fc29d407661c312aafa",
          "public_key_b64": "6Jev2AJNK2FX0i4zOxT0xoKey3Qu/6v9CLUGCSXxv1E=",
          "record_hash": "a8aca4be783a12c26a944326cc40015aa14d68b5aaf5734b2345f3a74b8ca858",
          "schema": "cain42.a75.enterprise.record.v1",
          "signature_b64": "gShckUyhAz7kD7kZy4pLRBuZ0PLvvr2rGRDSZ9tf4i5KYOgjQ6Nucz8V39Pp/a4JOHycYH/bjJe27swnxOd7Aw==",
          "sku": "CAIN-A75-018",
          "subject": {
            "agents": [
              {
                "agent_id": "agent-crm",
                "data_classes": [
                  "pii"
                ],
                "environment": "prod",
                "last_review_days_ago": 20,
                "owner": "revops",
                "purpose": "Draft CRM follow-ups",
                "tools": [
                  "crm.read",
                  "crm.draft"
                ]
              },
              {
                "agent_id": "agent-ops",
                "data_classes": [
                  "internal"
                ],
                "environment": "prod",
                "last_review_days_ago": 35,
                "owner": "platform",
                "purpose": "Triage incidents",
                "tools": [
                  "incident.read",
                  "pager.write"
                ]
              }
            ],
            "authority": {
              "governance_body": "AI Risk Council",
              "now": 1000.0,
              "policy_revision_sha256": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
            },
            "claims": {
              "all_agents_reviewed": true,
              "all_controls_active": true,
              "no_high_risk_policy_off": true
            },
            "controls": [
              {
                "agent_id": "agent-crm",
                "control": "identity",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              },
              {
                "agent_id": "agent-crm",
                "control": "logging",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              },
              {
                "agent_id": "agent-crm",
                "control": "data_boundary",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              },
              {
                "agent_id": "agent-crm",
                "control": "kill_switch",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              },
              {
                "agent_id": "agent-ops",
                "control": "identity",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              },
              {
                "agent_id": "agent-ops",
                "control": "logging",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              },
              {
                "agent_id": "agent-ops",
                "control": "data_boundary",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              },
              {
                "agent_id": "agent-ops",
                "control": "kill_switch",
                "evidence_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
                "status": "pass"
              }
            ],
            "exceptions": [],
            "max_review_age_days": 90,
            "policies": [
              {
                "data_classes": [
                  "pii"
                ],
                "enforcement": "enforce",
                "id": "PII-ENFORCE"
              },
              {
                "data_classes": [
                  "internal"
                ],
                "enforcement": "enforce",
                "id": "OPS-LOG"
              }
            ],
            "schema": "cain42.a75.enterprise.governance.v1"
          },
          "subject_sha256": "6b4ab1fd48d3be45f6ec3df7775ebf5dea9e251ce666ea5aaf744a10a03845e9",
          "verdict": "CONFORMANT"
        }
      ],
      "run_hash": "9220c0487ca81e1b7914416af2aa985e68b4c8bb54603f8036e78a4e879276a6",
      "schema": "cain42.a75.enterprise.run.v1",
      "sku": "CAIN-A75-018",
      "verdict": "VERIFIED",
      "verdicts": [
        "CONFORMANT"
      ]
    },
    "scenarios": [
      {
        "agents": [
          "agent-crm",
          "agent-ops"
        ],
        "name": "two_agent_governed_fleet",
        "run_hash": "9220c0487ca81e1b7914416af2aa985e68b4c8bb54603f8036e78a4e879276a6",
        "verdict": "VERIFIED"
      },
      {
        "expected": "CONFORMANT",
        "name": "honest_governed_fleet",
        "verdict": "CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "missing_owner",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "stale_review",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "missing_control",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "failed_control",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "high_risk_policy_off",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "blanket_exception",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "expired_exception_does_not_waive",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "exception_unknown_agent",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "exception_unknown_policy",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "duplicate_agent",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "bad_environment",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "no_governance_body",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "claim_overstates",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "unknown_claim",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "wrong_schema",
        "verdict": "NON_CONFORMANT"
      },
      {
        "expected": "NON_CONFORMANT",
        "name": "garbage",
        "verdict": "NON_CONFORMANT"
      }
    ],
    "summary": "VERIFIED: ownership, review age, required controls, scoped exceptions and high-risk policy enforcement recomputed; 17/17 governance-failure cases as expected"
  },
  "schema": "cain42.agentic75.findings.v1",
  "sku": "CAIN-A75-018"
}