# Enterprise Agent Governance Review

**SKU:** CAIN-A75-018  
**Development:** #18 Full-stack agent safety infrastructure  
**Product status:** DELIVERABLE  
**Engine:** `enterprise_governance` (`cain_a75_engines/enterprisegov/engine.py`)  
**Profile:** `two_agent_fleet`  
**Generated:** 2026-11-12T07:59:12Z UTC

## Result

VERIFIED: ownership, review age, required controls, scoped exceptions and high-risk policy enforcement recomputed; 17/17 governance-failure cases as expected

- **two_agent_governed_fleet**: VERIFIED
- **honest_governed_fleet**: CONFORMANT
- **missing_owner**: NON_CONFORMANT
- **stale_review**: NON_CONFORMANT
- **missing_control**: NON_CONFORMANT
- **failed_control**: NON_CONFORMANT
- **high_risk_policy_off**: NON_CONFORMANT
- **blanket_exception**: NON_CONFORMANT
- **expired_exception_does_not_waive**: NON_CONFORMANT
- **exception_unknown_agent**: NON_CONFORMANT
- **exception_unknown_policy**: NON_CONFORMANT
- **duplicate_agent**: NON_CONFORMANT
- **bad_environment**: NON_CONFORMANT
- **no_governance_body**: NON_CONFORMANT
- **claim_overstates**: NON_CONFORMANT
- **unknown_claim**: NON_CONFORMANT
- **wrong_schema**: NON_CONFORMANT
- **garbage**: NON_CONFORMANT

## Limits of this run

Reviews the supplied governance record. It does not inspect the live fleet, verify control evidence, or prove the agents behave as documented. The run is Ed25519-signed; pin the issuer key out of band.

This is a bounded run on a sample. It is not an assessment of any production system, not a
certification, and not a signed attestation. The accompanying `manifest.json` records SHA-256
hashes so a recipient can detect a changed file. The manifest is not a signature and not an
attestation; it does not prove who produced the artifact.

## What this is not

- Not a vendor integration, partnership or endorsement.
- Not legal, tax, clinical, insurance or safety advice.
- Not a third-party audit, SOC 2 report, ISO certification or patent filing.
- Not a production write action: no downstream tool was called.

Prices and packaging are proposals. Built by a three-person team.