# Runtime Containment Audit

**SKU:** CAIN-A75-019  
**Development:** #19 Runtime agent quarantine  
**Product status:** DELIVERABLE  
**Engine:** `runtime_containment` (`cain_a75_engines/runtimecontainment/engine.py`)  
**Profile:** `two_agent_incident`  
**Generated:** 2026-11-12T07:59:12Z UTC

## Result

VERIFIED: affected-agent coverage, SLA, verified receipts, lateral scope and recovery ordering recomputed; 15/15 containment-failure cases as expected

- **two_agent_incident**: VERIFIED
- **honest_containment**: CONTAINED
- **affected_agent_not_contained**: NOT_CONTAINED
- **sla_breached**: NOT_CONTAINED
- **receipt_not_verified**: NOT_CONTAINED
- **receipt_missing**: NOT_CONTAINED
- **receipt_hash_malformed**: NOT_CONTAINED
- **lateral_target_unjustified**: NOT_CONTAINED
- **recovery_before_verification**: NOT_CONTAINED
- **canary_failed**: NOT_CONTAINED
- **duplicate_action**: NOT_CONTAINED
- **bad_action_type**: NOT_CONTAINED
- **claim_overstates**: NOT_CONTAINED
- **unknown_claim**: NOT_CONTAINED
- **wrong_schema**: NOT_CONTAINED
- **garbage**: NOT_CONTAINED

## Limits of this run

Audits the supplied incident record. It does not query the runtime or prove the affected set was complete. The run is Ed25519-signed; pin the issuer key out of band.

This is a bounded run on a sample. It is not an assessment of any production system, not a
certification, and not a signed attestation. The accompanying `manifest.json` records SHA-256
hashes so a recipient can detect a changed file. The manifest is not a signature and not an
attestation; it does not prove who produced the artifact.

## What this is not

- Not a vendor integration, partnership or endorsement.
- Not legal, tax, clinical, insurance or safety advice.
- Not a third-party audit, SOC 2 report, ISO certification or patent filing.
- Not a production write action: no downstream tool was called.

Prices and packaging are proposals. Built by a three-person team.