{
  "label": "Recomputes a fleet-governance design: capacity and headroom, identity and rotation, canary rollout, kill-switch scope and speed, tenant isolation, inventory and claim honesty. It does not provision or load-test a fleet.",
  "public_key_b64": "Od3fI6b4NvdqV6TyxVxBs3eqvVDnFn1+OLZdsCVPDi0=",
  "records": [
    {
      "checks": [
        {
          "detail": "demand 100.0 qps <= usable supply 240.0 qps",
          "id": "capacity.total",
          "ok": true
        },
        {
          "detail": "per region 25.0 <= 60.0",
          "id": "capacity.per_region",
          "ok": true
        },
        {
          "detail": "headroom 40.0% >= 20%",
          "id": "capacity.headroom",
          "ok": true
        },
        {
          "detail": "a root of trust is named",
          "id": "identity.root",
          "ok": true
        },
        {
          "detail": "a workload identity system is named",
          "id": "identity.workload",
          "ok": true
        },
        {
          "detail": "rotation 30.0 days <= 90",
          "id": "identity.rotation",
          "ok": true
        },
        {
          "detail": "every agent has its own credential",
          "id": "identity.per_agent",
          "ok": true
        },
        {
          "detail": "rollout 'canary'",
          "id": "policy.canary_first",
          "ok": true
        },
        {
          "detail": "canary 5.0% in (0, 10]",
          "id": "policy.canary_small",
          "ok": true
        },
        {
          "detail": "rollback 60.0s <= 300s",
          "id": "policy.fast_rollback",
          "ok": true
        },
        {
          "detail": "the policy revision is hashed",
          "id": "policy.revision_hash",
          "ok": true
        },
        {
          "detail": "scope 'global'",
          "id": "containment.scope",
          "ok": true
        },
        {
          "detail": "the kill switch was tested",
          "id": "containment.tested",
          "ok": true
        },
        {
          "detail": "halt 2.0s <= 60s",
          "id": "containment.fast_halt",
          "ok": true
        },
        {
          "detail": "tenant namespaces",
          "id": "isolation.tenant_namespace",
          "ok": true
        },
        {
          "detail": "cross-tenant traffic is denied",
          "id": "isolation.cross_tenant_denied",
          "ok": true
        },
        {
          "detail": "noisy-neighbour limits",
          "id": "isolation.noisy_neighbor",
          "ok": true
        },
        {
          "detail": "an inventory source is named",
          "id": "inventory.source_of_truth",
          "ok": true
        },
        {
          "detail": "reconciles every 4.0h <= 24h",
          "id": "inventory.reconciled",
          "ok": true
        },
        {
          "detail": "coverage 100.0%",
          "id": "inventory.coverage",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.capacity_sufficient",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.containment_tested",
          "ok": true
        },
        {
          "detail": "claimed True, computed True",
          "id": "claims.identity_per_agent",
          "ok": true
        }
      ],
      "created_at": "2026-11-12T07:59:16Z",
      "engine": "a75-025/1.0.0",
      "extra": {
        "agents": 10000,
        "computed": {
          "capacity_sufficient": true,
          "containment_tested": true,
          "identity_per_agent": true
        },
        "demand_qps": 100.0,
        "tenants": 500,
        "usable_supply_qps": 240.0
      },
      "failed": [],
      "label": "Recomputes a fleet-governance design: capacity and headroom, identity and rotation, canary rollout, kill-switch scope and speed, tenant isolation, inventory and claim honesty. It does not provision or load-test a fleet.",
      "prev_record_hash": "95e0b4d93f36942f20d6b45cda9898b0f730c8c5e12581d4cf999c17cfb43b1e",
      "public_key_b64": "Od3fI6b4NvdqV6TyxVxBs3eqvVDnFn1+OLZdsCVPDi0=",
      "record_hash": "bafd42112aa4fd2ac5909e9a8a65533694c9eeb25d908cbeb32025b73d9d08ad",
      "schema": "cain42.a75.fleet.record.v1",
      "signature_b64": "bPvJs3YMBwqWMzcMGtv4ZnOlseqAYb66wiIYZW91pQKjccfdxrOEcZyFYsVQoILdGHUlscfFPef4ceYj0dZRBQ==",
      "sku": "CAIN-A75-025",
      "subject": {
        "capacity": {
          "control_plane_qps_per_replica": 50.0,
          "control_plane_replicas": 8,
          "headroom_pct": 40.0,
          "per_agent_qps": 0.01
        },
        "claims": {
          "capacity_sufficient": true,
          "containment_tested": true,
          "identity_per_agent": true
        },
        "containment": {
          "kill_switch_scope": "global",
          "max_halt_seconds": 2.0,
          "tested": true
        },
        "fleet": {
          "planned_agents": 10000,
          "regions": 4,
          "tenants": 500
        },
        "identity": {
          "per_agent_credential": true,
          "root_of_trust": "kms-root",
          "rotation_days": 30.0,
          "workload_identity": "spiffe"
        },
        "inventory": {
          "coverage_pct": 100.0,
          "reconciliation_hours": 4.0,
          "source_of_truth": "cmdb"
        },
        "isolation": {
          "cross_tenant_denied": true,
          "noisy_neighbor_limits": true,
          "tenant_namespace": true
        },
        "policy": {
          "canary_pct": 5.0,
          "policy_revision_sha256": "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
          "rollback_seconds": 60.0,
          "rollout": "canary"
        },
        "schema": "cain42.a75.fleet.design.v1"
      },
      "subject_sha256": "91e310a0b590249b2ad41fb3c72a2be8447216a6f33c46c2333918620c0c3bcc",
      "verdict": "SOUND"
    }
  ],
  "run_hash": "ad87f7b29674508bdb67af272cb75ce33584b944ff6b6aa05910f8ba83934708",
  "schema": "cain42.a75.fleet.run.v1",
  "sku": "CAIN-A75-025",
  "verdict": "VERIFIED",
  "verdicts": [
    "SOUND"
  ]
}