{ "created_at": "2026-11-12T07:59:12Z", "result": { "engine": "context_graph", "limits": "Reviews the query result record. It does not query the graph store, prove the graph is complete, or prove redaction removed every sensitive field. The run is Ed25519-signed; pin the issuer key out of band.", "module": "cain_a75_engines/contextgraph/engine.py", "profile": "project_brief_query", "run": { "label": "Recomputes a context-graph query: graph integrity, allowed relations, tenant isolation, ACL or redaction, depth bound, classified-node redaction and claim honesty. It does not query the graph store.", "public_key_b64": "2XyBebX+SKkAKPCIOwX3rzqK4B0dhW56cQjYgUSdwcs=", "records": [ { "checks": [ { "detail": "'P-dana' -> 'X-atlas'", "id": "edge.P-dana->X-atlas.exists", "ok": true }, { "detail": "relation 'manages'", "id": "edge.P-dana->X-atlas.allowed", "ok": true }, { "detail": "'X-atlas' -> 'D-plan'", "id": "edge.X-atlas->D-plan.exists", "ok": true }, { "detail": "relation 'contains'", "id": "edge.X-atlas->D-plan.allowed", "ok": true }, { "detail": "'X-atlas' -> 'D-public'", "id": "edge.X-atlas->D-public.exists", "ok": true }, { "detail": "relation 'contains'", "id": "edge.X-atlas->D-public.allowed", "ok": true }, { "detail": "tenant isolation is required", "id": "policy.tenant_isolation", "ok": true }, { "detail": "the node exists", "id": "result.P-dana.exists", "ok": true }, { "detail": "node tenant 'tenant-a', query tenant 'tenant-a'", "id": "result.P-dana.tenant", "ok": true }, { "detail": "depth 0 <= 2", "id": "result.P-dana.depth", "ok": true }, { "detail": "principal in ACL, or the node is redacted or public", "id": "result.P-dana.acl", "ok": true }, { "detail": "classified node is redacted", "id": "result.P-dana.redaction", "ok": true }, { "detail": "type 'person'", "id": "result.P-dana.type", "ok": true }, { "detail": "the node exists", "id": "result.X-atlas.exists", "ok": true }, { "detail": "node tenant 'tenant-a', query tenant 'tenant-a'", "id": "result.X-atlas.tenant", "ok": true }, { "detail": "depth 1 <= 2", "id": "result.X-atlas.depth", "ok": true }, { "detail": "principal in ACL, or the node is redacted or public", "id": "result.X-atlas.acl", "ok": true }, { "detail": "classified node is redacted", "id": "result.X-atlas.redaction", "ok": true }, { "detail": "type 'project'", "id": "result.X-atlas.type", "ok": true }, { "detail": "the node exists", "id": "result.D-plan.exists", "ok": true }, { "detail": "node tenant 'tenant-a', query tenant 'tenant-a'", "id": "result.D-plan.tenant", "ok": true }, { "detail": "depth 2 <= 2", "id": "result.D-plan.depth", "ok": true }, { "detail": "principal in ACL, or the node is redacted or public", "id": "result.D-plan.acl", "ok": true }, { "detail": "classified node is redacted", "id": "result.D-plan.redaction", "ok": true }, { "detail": "type 'document'", "id": "result.D-plan.type", "ok": true }, { "detail": "the node exists", "id": "result.D-public.exists", "ok": true }, { "detail": "node tenant 'tenant-a', query tenant 'tenant-a'", "id": "result.D-public.tenant", "ok": true }, { "detail": "depth 2 <= 2", "id": "result.D-public.depth", "ok": true }, { "detail": "principal in ACL, or the node is redacted or public", "id": "result.D-public.acl", "ok": true }, { "detail": "classified node is redacted", "id": "result.D-public.redaction", "ok": true }, { "detail": "type 'document'", "id": "result.D-public.type", "ok": true }, { "detail": "claimed True, computed True", "id": "claims.acl_respected", "ok": true }, { "detail": "claimed True, computed True", "id": "claims.depth_bounded", "ok": true }, { "detail": "claimed True, computed True", "id": "claims.tenant_isolated", "ok": true } ], "created_at": "2026-11-12T07:59:12Z", "engine": "a75-031/1.0.0", "extra": { "computed": { "acl_respected": true, "depth_bounded": true, "tenant_isolated": true }, "max_returned_depth": 2, "returned": { "D-plan": { "depth": 2, "redacted": true }, "D-public": { "depth": 2, "redacted": false }, "P-dana": { "depth": 0, "redacted": false }, "X-atlas": { "depth": 1, "redacted": false } } }, "failed": [], "label": "Recomputes a context-graph query: graph integrity, allowed relations, tenant isolation, ACL or redaction, depth bound, classified-node redaction and claim honesty. It does not query the graph store.", "prev_record_hash": "785587647401bcf7414b531dde35c501d6f6dee389ca5dbdd3af65e86a152c9b", "public_key_b64": "2XyBebX+SKkAKPCIOwX3rzqK4B0dhW56cQjYgUSdwcs=", "record_hash": "9bb2ec13b2ce70185514f63b4e1a0e4d72a28b202bf08d7e5864a9ccbe76813c", "schema": "cain42.a75.contextgraph.record.v1", "signature_b64": "aWC8cFmJncqcm3fbhj5Vvz+DBL3Vnna3hONdTv0I89+7ayYv5PB3dAWgJUfkCFFJ5YUo/vxIzooz+1PjNU22CQ==", "sku": "CAIN-A75-031", "subject": { "claims": { "acl_respected": true, "depth_bounded": true, "tenant_isolated": true }, "graph": { "edges": [ { "from": "P-dana", "relation": "manages", "to": "X-atlas" }, { "from": "X-atlas", "relation": "contains", "to": "D-plan" }, { "from": "X-atlas", "relation": "contains", "to": "D-public" } ], "nodes": [ { "acl": [ "human:dana" ], "classification": "internal", "id": "P-dana", "tenant": "tenant-a", "type": "person" }, { "acl": [ "human:dana" ], "classification": "internal", "id": "X-atlas", "tenant": "tenant-a", "type": "project" }, { "acl": [ "human:dana" ], "classification": "confidential", "id": "D-plan", "tenant": "tenant-a", "type": "document" }, { "acl": [], "classification": "public", "id": "D-public", "tenant": "tenant-a", "type": "document" } ] }, "policy": { "allowed_relations": [ "manages", "contains" ], "redaction_required_for": [ "confidential" ], "tenant_isolation": true }, "query": { "agent": "agent:assistant", "max_depth": 2, "principal": "human:dana", "purpose": "prepare project brief", "requested_types": [ "person", "project", "document" ], "roots": [ "P-dana" ], "tenant": "tenant-a" }, "results": [ { "depth": 0, "node_id": "P-dana", "redacted": false }, { "depth": 1, "node_id": "X-atlas", "redacted": false }, { "depth": 2, "node_id": "D-plan", "redacted": true }, { "depth": 2, "node_id": "D-public", "redacted": false } ], "schema": "cain42.a75.context.graph.v1" }, "subject_sha256": "18c32f1a53e16ac50b11da1287565729612791f0f466edfa5d4dfb19c728fd4c", "verdict": "SOUND" } ], "run_hash": "4cd68a7e68a8eeca7ca8e0c8ba63e020b3cf11f16d0e6791b6037994690fea86", "schema": "cain42.a75.contextgraph.run.v1", "sku": "CAIN-A75-031", "verdict": "VERIFIED", "verdicts": [ "SOUND" ] }, "scenarios": [ { "max_depth": 2, "name": "project_brief_query", "returned": 4, "run_hash": "4cd68a7e68a8eeca7ca8e0c8ba63e020b3cf11f16d0e6791b6037994690fea86", "verdict": "VERIFIED" }, { "expected": "SOUND", "name": "honest_context_query", "verdict": "SOUND" }, { "expected": "UNSOUND", "name": "cross_tenant_result", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "depth_exceeded", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "acl_missing", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "confidential_not_redacted", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "disallowed_relation", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "dangling_edge", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "unknown_result_node", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "duplicate_node", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "duplicate_result", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "max_depth_too_large", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "unrequested_type", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "claim_overstates", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "unknown_claim", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "wrong_schema", "verdict": "UNSOUND" }, { "expected": "UNSOUND", "name": "garbage", "verdict": "UNSOUND" } ], "summary": "VERIFIED: tenancy, ACL, depth, redaction and relation checks recomputed; 16/16 graph-failure cases as expected" }, "schema": "cain42.agentic75.findings.v1", "sku": "CAIN-A75-031" }