# CAIN-A75-018 Enterprise Agent Governance Review

**Verdict:** VERIFIED

> Recomputes enterprise agent governance: ownership and review age, required controls, scoped exceptions, high-risk policy enforcement, governance authority and claim honesty. It does not inspect the live fleet.

| Record | Verdict | Agents | Live exceptions | Failed checks |
|---|---|---|---|---|
| 0 | CONFORMANT | 2 | 0 |  |

## What this proves and what it does not
- Proves: every agent has an owner and a current review, every required control passes or is covered by a live, scoped exception, high-risk policies are not switched off, and the record does not overstate itself.
- Does not prove: that the controls were implemented well, that the evidence hashes are truthful, or that the fleet behaves as documented. It is a record review, not a penetration test.
- Verify offline: `python3 verify_offline.py run.json --pinned-key 6Jev2AJNK2FX0i4zOxT0xoKey3Qu/6v9CLUGCSXxv1E=`