# Agent Lease Review

**SKU:** CAIN-A75-027  
**Development:** #27 Always-on workplace teammates  
**Product status:** DELIVERABLE  
**Engine:** `agent_lease` (`cain_a75_engines/agentlease/engine.py`)  
**Profile:** `always_on_ops`  
**Generated:** 2026-11-12T07:59:12Z UTC

## Result

VERIFIED: term, human-rooted delegation, renewals, heartbeats and attestation recomputed; 18/18 lease-failure cases as expected

- **always_on_ops_lease**: VERIFIED
- **honest_active_lease**: ACTIVE
- **lease_expired**: REVOKED
- **lease_too_long**: REVOKED
- **scope_escalation**: REVOKED
- **delegation_edge_expired**: REVOKED
- **delegation_root_not_human**: REVOKED
- **delegation_widens_authority**: REVOKED
- **delegation_chain_broken**: REVOKED
- **too_many_renewals**: REVOKED
- **renewal_needs_approval**: REVOKED
- **self_approved_renewal**: REVOKED
- **heartbeats_missed**: REVOKED
- **attestation_failed**: REVOKED
- **version_hash_missing**: REVOKED
- **claim_overstates**: REVOKED
- **unknown_claim**: REVOKED
- **wrong_schema**: REVOKED
- **garbage**: REVOKED

## Limits of this run

Reviews the lease record. It does not contact the agent, revoke the lease, or prove the attestation is truthful. The run is Ed25519-signed; pin the issuer key out of band.

This is a bounded run on a sample. It is not an assessment of any production system, not a
certification, and not a signed attestation. The accompanying `manifest.json` records SHA-256
hashes so a recipient can detect a changed file. The manifest is not a signature and not an
attestation; it does not prove who produced the artifact.

## What this is not

- Not a vendor integration, partnership or endorsement.
- Not legal, tax, clinical, insurance or safety advice.
- Not a third-party audit, SOC 2 report, ISO certification or patent filing.
- Not a production write action: no downstream tool was called.

Prices and packaging are proposals. Built by a three-person team.