{
  "created_at": "2026-11-12T07:59:12Z",
  "result": {
    "engine": "os_containment",
    "limits": "Reviews the sandbox configuration record. It does not start the sandbox, probe it at runtime, or prove the kernel is uncompromised. The run is Ed25519-signed; pin the issuer key out of band.",
    "module": "cain_a75_engines/oscontainment/engine.py",
    "profile": "bubblewrap_agent",
    "run": {
      "label": "Audits an OS sandbox configuration: namespaces, seccomp default-deny and dangerous syscalls, no_new_privs and capabilities, sensitive mounts, egress, resource limits and secret inheritance. It does not start the sandbox.",
      "public_key_b64": "CRWZZWFnvJTlFISmFAI0Fa4Mqrop3M5IYyoGSoEMh7Q=",
      "records": [
        {
          "checks": [
            {
              "detail": "user namespace True",
              "id": "namespace.user",
              "ok": true
            },
            {
              "detail": "mount namespace True",
              "id": "namespace.mount",
              "ok": true
            },
            {
              "detail": "pid namespace True",
              "id": "namespace.pid",
              "ok": true
            },
            {
              "detail": "net namespace True",
              "id": "namespace.net",
              "ok": true
            },
            {
              "detail": "profile 'agent-default'",
              "id": "seccomp.present",
              "ok": true
            },
            {
              "detail": "default 'SCMP_ACT_ERRNO'",
              "id": "seccomp.default_deny",
              "ok": true
            },
            {
              "detail": "no dangerous syscall allowed",
              "id": "seccomp.no_dangerous_syscalls",
              "ok": true
            },
            {
              "detail": "no_new_privs is set",
              "id": "privilege.no_new_privs",
              "ok": true
            },
            {
              "detail": "bounding set []",
              "id": "privilege.no_sys_admin",
              "ok": true
            },
            {
              "detail": "'/usr' mounted ro",
              "id": "mount./usr.sensitive_not_writable",
              "ok": true
            },
            {
              "detail": "'/usr' is never mountable into an agent sandbox, even read-only",
              "id": "mount./usr.not_forbidden",
              "ok": true
            },
            {
              "detail": "'tmpfs' mounted rw",
              "id": "mount./tmp.sensitive_not_writable",
              "ok": true
            },
            {
              "detail": "'tmpfs' is never mountable into an agent sandbox, even read-only",
              "id": "mount./tmp.not_forbidden",
              "ok": true
            },
            {
              "detail": "egress 'deny'",
              "id": "network.egress",
              "ok": true
            },
            {
              "detail": "allowlist []",
              "id": "network.no_catch_all",
              "ok": true
            },
            {
              "detail": "an allowlist is non-empty",
              "id": "network.allowlist_if_needed",
              "ok": true
            },
            {
              "detail": "memory_max_mb 256",
              "id": "resources.memory",
              "ok": true
            },
            {
              "detail": "pids_max 64",
              "id": "resources.pids",
              "ok": true
            },
            {
              "detail": "no credential-like env",
              "id": "secrets.no_credential_env",
              "ok": true
            },
            {
              "detail": "mounted secrets: []",
              "id": "secrets.no_secret_mount",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.namespaces_complete",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.no_new_privs",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.no_secret_leak",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.seccomp_denies_by_default",
              "ok": true
            }
          ],
          "created_at": "2026-11-12T07:59:12Z",
          "engine": "a75-020/1.0.0",
          "extra": {
            "computed": {
              "namespaces_complete": true,
              "no_new_privs": true,
              "no_secret_leak": true,
              "seccomp_denies_by_default": true
            },
            "sandbox": "bubblewrap"
          },
          "failed": [],
          "label": "Audits an OS sandbox configuration: namespaces, seccomp default-deny and dangerous syscalls, no_new_privs and capabilities, sensitive mounts, egress, resource limits and secret inheritance. It does not start the sandbox.",
          "prev_record_hash": "b4326310fde830259abed30d1f7696d884415e678998c5cb7380013147619551",
          "public_key_b64": "CRWZZWFnvJTlFISmFAI0Fa4Mqrop3M5IYyoGSoEMh7Q=",
          "record_hash": "7f72d7101808fb2f95f662a172d35d68b9ef47600da00c2cff806889b5c08a1c",
          "schema": "cain42.a75.oscontainment.record.v1",
          "signature_b64": "hDSDeS++Nok3vU0ICYSJ4SkI4rfjSkNPT6OowiqKXGfE7ux43Hwp5BtWmipVuaG5gxIyzXXotEfVcEoNlNbdAg==",
          "sku": "CAIN-A75-020",
          "subject": {
            "capabilities": {
              "bounding_set": [],
              "no_new_privs": true
            },
            "claims": {
              "namespaces_complete": true,
              "no_new_privs": true,
              "no_secret_leak": true,
              "seccomp_denies_by_default": true
            },
            "mounts": [
              {
                "mode": "ro",
                "source": "/usr",
                "target": "/usr"
              },
              {
                "mode": "rw",
                "source": "tmpfs",
                "target": "/tmp"
              }
            ],
            "namespaces": {
              "cgroup": true,
              "ipc": true,
              "mount": true,
              "net": true,
              "pid": true,
              "user": true,
              "uts": true
            },
            "network": {
              "allowlist": [],
              "egress": "deny"
            },
            "resources": {
              "cpu_quota": 50000,
              "memory_max_mb": 256,
              "pids_max": 64
            },
            "sandbox": {
              "engine": "bubblewrap",
              "version": "0.9"
            },
            "schema": "cain42.a75.os.containment.v1",
            "seccomp": {
              "allowed_syscalls": [
                "read",
                "write",
                "exit",
                "exit_group",
                "futex",
                "clock_gettime"
              ],
              "default_action": "SCMP_ACT_ERRNO",
              "profile": "agent-default"
            },
            "secrets": {
              "inherited_env": [
                "PATH",
                "LANG"
              ],
              "mounted_files": []
            }
          },
          "subject_sha256": "a0e6404ae9227583be9a95627b56cc8b7db132765e292d4be27dc299e5625473",
          "verdict": "CONTAINED"
        }
      ],
      "run_hash": "65f9166fa56223f8b86550bdafc53c815a33a6762f244298a525393953390ff4",
      "schema": "cain42.a75.oscontainment.run.v1",
      "sku": "CAIN-A75-020",
      "verdict": "VERIFIED",
      "verdicts": [
        "CONTAINED"
      ]
    },
    "scenarios": [
      {
        "name": "bubblewrap_agent_sandbox",
        "run_hash": "65f9166fa56223f8b86550bdafc53c815a33a6762f244298a525393953390ff4",
        "sandbox": "bubblewrap",
        "verdict": "VERIFIED"
      },
      {
        "expected": "CONTAINED",
        "name": "honest_confined_sandbox",
        "verdict": "CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "missing_net_namespace",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "seccomp_allows_by_default",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "dangerous_syscall_allowed",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "ptrace_allowed",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "no_new_privs_missing",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "sys_admin_capability",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "etc_mounted_rw",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "container_socket_mounted",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "network_allow_all",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "network_allowlist_empty",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "no_memory_limit",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "no_pid_limit",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "credential_env_inherited",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "secret_file_mounted",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "duplicate_mount",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "unknown_sandbox",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "claim_overstates",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "unknown_claim",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "wrong_schema",
        "verdict": "NOT_CONTAINED"
      },
      {
        "expected": "NOT_CONTAINED",
        "name": "garbage",
        "verdict": "NOT_CONTAINED"
      }
    ],
    "summary": "VERIFIED: namespaces, seccomp, privilege, mounts, egress, resources and secrets recomputed; 21/21 sandbox-failure cases as expected"
  },
  "schema": "cain42.agentic75.findings.v1",
  "sku": "CAIN-A75-020"
}