# Context Graph Review

**SKU:** CAIN-A75-031  
**Development:** #31 Shared organisational context graphs  
**Product status:** DELIVERABLE  
**Engine:** `context_graph` (`cain_a75_engines/contextgraph/engine.py`)  
**Profile:** `project_brief_query`  
**Generated:** 2026-11-12T07:59:12Z UTC

## Result

VERIFIED: tenancy, ACL, depth, redaction and relation checks recomputed; 16/16 graph-failure cases as expected

- **project_brief_query**: VERIFIED
- **honest_context_query**: SOUND
- **cross_tenant_result**: UNSOUND
- **depth_exceeded**: UNSOUND
- **acl_missing**: UNSOUND
- **confidential_not_redacted**: UNSOUND
- **disallowed_relation**: UNSOUND
- **dangling_edge**: UNSOUND
- **unknown_result_node**: UNSOUND
- **duplicate_node**: UNSOUND
- **duplicate_result**: UNSOUND
- **max_depth_too_large**: UNSOUND
- **unrequested_type**: UNSOUND
- **claim_overstates**: UNSOUND
- **unknown_claim**: UNSOUND
- **wrong_schema**: UNSOUND
- **garbage**: UNSOUND

## Limits of this run

Reviews the query result record. It does not query the graph store, prove the graph is complete, or prove redaction removed every sensitive field. The run is Ed25519-signed; pin the issuer key out of band.

This is a bounded run on a sample. It is not an assessment of any production system, not a
certification, and not a signed attestation. The accompanying `manifest.json` records SHA-256
hashes so a recipient can detect a changed file. The manifest is not a signature and not an
attestation; it does not prove who produced the artifact.

## What this is not

- Not a vendor integration, partnership or endorsement.
- Not legal, tax, clinical, insurance or safety advice.
- Not a third-party audit, SOC 2 report, ISO certification or patent filing.
- Not a production write action: no downstream tool was called.

Prices and packaging are proposals. Built by a three-person team.