{
  "created_at": "2026-11-12T07:59:12Z",
  "result": {
    "engine": "fleet_design",
    "limits": "Reviews a design record. It does not provision or load-test a fleet, and a design is a plan, not evidence that 10,000 agents actually run. The run is Ed25519-signed; pin the issuer key out of band.",
    "module": "cain_a75_engines/fleetdesign/engine.py",
    "profile": "ten_thousand_agents",
    "run": {
      "label": "Recomputes a fleet-governance design: capacity and headroom, identity and rotation, canary rollout, kill-switch scope and speed, tenant isolation, inventory and claim honesty. It does not provision or load-test a fleet.",
      "public_key_b64": "Od3fI6b4NvdqV6TyxVxBs3eqvVDnFn1+OLZdsCVPDi0=",
      "records": [
        {
          "checks": [
            {
              "detail": "demand 100.0 qps <= usable supply 240.0 qps",
              "id": "capacity.total",
              "ok": true
            },
            {
              "detail": "per region 25.0 <= 60.0",
              "id": "capacity.per_region",
              "ok": true
            },
            {
              "detail": "headroom 40.0% >= 20%",
              "id": "capacity.headroom",
              "ok": true
            },
            {
              "detail": "a root of trust is named",
              "id": "identity.root",
              "ok": true
            },
            {
              "detail": "a workload identity system is named",
              "id": "identity.workload",
              "ok": true
            },
            {
              "detail": "rotation 30.0 days <= 90",
              "id": "identity.rotation",
              "ok": true
            },
            {
              "detail": "every agent has its own credential",
              "id": "identity.per_agent",
              "ok": true
            },
            {
              "detail": "rollout 'canary'",
              "id": "policy.canary_first",
              "ok": true
            },
            {
              "detail": "canary 5.0% in (0, 10]",
              "id": "policy.canary_small",
              "ok": true
            },
            {
              "detail": "rollback 60.0s <= 300s",
              "id": "policy.fast_rollback",
              "ok": true
            },
            {
              "detail": "the policy revision is hashed",
              "id": "policy.revision_hash",
              "ok": true
            },
            {
              "detail": "scope 'global'",
              "id": "containment.scope",
              "ok": true
            },
            {
              "detail": "the kill switch was tested",
              "id": "containment.tested",
              "ok": true
            },
            {
              "detail": "halt 2.0s <= 60s",
              "id": "containment.fast_halt",
              "ok": true
            },
            {
              "detail": "tenant namespaces",
              "id": "isolation.tenant_namespace",
              "ok": true
            },
            {
              "detail": "cross-tenant traffic is denied",
              "id": "isolation.cross_tenant_denied",
              "ok": true
            },
            {
              "detail": "noisy-neighbour limits",
              "id": "isolation.noisy_neighbor",
              "ok": true
            },
            {
              "detail": "an inventory source is named",
              "id": "inventory.source_of_truth",
              "ok": true
            },
            {
              "detail": "reconciles every 4.0h <= 24h",
              "id": "inventory.reconciled",
              "ok": true
            },
            {
              "detail": "coverage 100.0%",
              "id": "inventory.coverage",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.capacity_sufficient",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.containment_tested",
              "ok": true
            },
            {
              "detail": "claimed True, computed True",
              "id": "claims.identity_per_agent",
              "ok": true
            }
          ],
          "created_at": "2026-11-12T07:59:12Z",
          "engine": "a75-025/1.0.0",
          "extra": {
            "agents": 10000,
            "computed": {
              "capacity_sufficient": true,
              "containment_tested": true,
              "identity_per_agent": true
            },
            "demand_qps": 100.0,
            "tenants": 500,
            "usable_supply_qps": 240.0
          },
          "failed": [],
          "label": "Recomputes a fleet-governance design: capacity and headroom, identity and rotation, canary rollout, kill-switch scope and speed, tenant isolation, inventory and claim honesty. It does not provision or load-test a fleet.",
          "prev_record_hash": "95e0b4d93f36942f20d6b45cda9898b0f730c8c5e12581d4cf999c17cfb43b1e",
          "public_key_b64": "Od3fI6b4NvdqV6TyxVxBs3eqvVDnFn1+OLZdsCVPDi0=",
          "record_hash": "03598f0d218c4f4fd8f0141b80eb7d28a29c4b5ed2df51c40b3f7405b157efb9",
          "schema": "cain42.a75.fleet.record.v1",
          "signature_b64": "xcBZJHb4i/Ze/USO6exEtbNqbHy3Q95OpTNQa6+NUJyYukou/Sbh89GppAeMbaT0efYC6EC1qlZgWaB/pAcQDg==",
          "sku": "CAIN-A75-025",
          "subject": {
            "capacity": {
              "control_plane_qps_per_replica": 50.0,
              "control_plane_replicas": 8,
              "headroom_pct": 40.0,
              "per_agent_qps": 0.01
            },
            "claims": {
              "capacity_sufficient": true,
              "containment_tested": true,
              "identity_per_agent": true
            },
            "containment": {
              "kill_switch_scope": "global",
              "max_halt_seconds": 2.0,
              "tested": true
            },
            "fleet": {
              "planned_agents": 10000,
              "regions": 4,
              "tenants": 500
            },
            "identity": {
              "per_agent_credential": true,
              "root_of_trust": "kms-root",
              "rotation_days": 30.0,
              "workload_identity": "spiffe"
            },
            "inventory": {
              "coverage_pct": 100.0,
              "reconciliation_hours": 4.0,
              "source_of_truth": "cmdb"
            },
            "isolation": {
              "cross_tenant_denied": true,
              "noisy_neighbor_limits": true,
              "tenant_namespace": true
            },
            "policy": {
              "canary_pct": 5.0,
              "policy_revision_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
              "rollback_seconds": 60.0,
              "rollout": "canary"
            },
            "schema": "cain42.a75.fleet.design.v1"
          },
          "subject_sha256": "91e310a0b590249b2ad41fb3c72a2be8447216a6f33c46c2333918620c0c3bcc",
          "verdict": "SOUND"
        }
      ],
      "run_hash": "e2d55b96840eefa598c1972ce54422b0cf8f848adc0642d0586ab073daec6aea",
      "schema": "cain42.a75.fleet.run.v1",
      "sku": "CAIN-A75-025",
      "verdict": "VERIFIED",
      "verdicts": [
        "SOUND"
      ]
    },
    "scenarios": [
      {
        "demand_qps": 100.0,
        "name": "ten_thousand_agent_design",
        "run_hash": "e2d55b96840eefa598c1972ce54422b0cf8f848adc0642d0586ab073daec6aea",
        "supply_qps": 240.0,
        "verdict": "VERIFIED"
      },
      {
        "expected": "SOUND",
        "name": "honest_fleet_design",
        "verdict": "SOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "capacity_insufficient",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "headroom_too_low",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "shared_fleet_credential",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "slow_rotation",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "no_root_of_trust",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "all_at_once_rollout",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "canary_too_large",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "slow_rollback",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "kill_switch_untested",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "kill_switch_too_slow",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "kill_switch_per_agent_only",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "cross_tenant_allowed",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "no_noisy_neighbor_limits",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "stale_inventory",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "incomplete_inventory",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "claim_overstates",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "unknown_claim",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "wrong_schema",
        "verdict": "UNSOUND"
      },
      {
        "expected": "UNSOUND",
        "name": "garbage",
        "verdict": "UNSOUND"
      }
    ],
    "summary": "VERIFIED: capacity, identity, rollout, kill switch, isolation and inventory recomputed; 20/20 design-failure cases as expected"
  },
  "schema": "cain42.agentic75.findings.v1",
  "sku": "CAIN-A75-025"
}