# OS Containment Review

**SKU:** CAIN-A75-020  
**Development:** #20 Operating-system-enforced agent containment  
**Product status:** DELIVERABLE  
**Engine:** `os_containment` (`cain_a75_engines/oscontainment/engine.py`)  
**Profile:** `bubblewrap_agent`  
**Generated:** 2026-11-12T07:59:12Z UTC

## Result

VERIFIED: namespaces, seccomp, privilege, mounts, egress, resources and secrets recomputed; 21/21 sandbox-failure cases as expected

- **bubblewrap_agent_sandbox**: VERIFIED
- **honest_confined_sandbox**: CONTAINED
- **missing_net_namespace**: NOT_CONTAINED
- **seccomp_allows_by_default**: NOT_CONTAINED
- **dangerous_syscall_allowed**: NOT_CONTAINED
- **ptrace_allowed**: NOT_CONTAINED
- **no_new_privs_missing**: NOT_CONTAINED
- **sys_admin_capability**: NOT_CONTAINED
- **etc_mounted_rw**: NOT_CONTAINED
- **container_socket_mounted**: NOT_CONTAINED
- **network_allow_all**: NOT_CONTAINED
- **network_allowlist_empty**: NOT_CONTAINED
- **no_memory_limit**: NOT_CONTAINED
- **no_pid_limit**: NOT_CONTAINED
- **credential_env_inherited**: NOT_CONTAINED
- **secret_file_mounted**: NOT_CONTAINED
- **duplicate_mount**: NOT_CONTAINED
- **unknown_sandbox**: NOT_CONTAINED
- **claim_overstates**: NOT_CONTAINED
- **unknown_claim**: NOT_CONTAINED
- **wrong_schema**: NOT_CONTAINED
- **garbage**: NOT_CONTAINED

## Limits of this run

Reviews the sandbox configuration record. It does not start the sandbox, probe it at runtime, or prove the kernel is uncompromised. The run is Ed25519-signed; pin the issuer key out of band.

This is a bounded run on a sample. It is not an assessment of any production system, not a
certification, and not a signed attestation. The accompanying `manifest.json` records SHA-256
hashes so a recipient can detect a changed file. The manifest is not a signature and not an
attestation; it does not prove who produced the artifact.

## What this is not

- Not a vendor integration, partnership or endorsement.
- Not legal, tax, clinical, insurance or safety advice.
- Not a third-party audit, SOC 2 report, ISO certification or patent filing.
- Not a production write action: no downstream tool was called.

Prices and packaging are proposals. Built by a three-person team.