{ "spec": "E37_PROTOCOL_SPEC.md", "vectors": [ { "description": "authorized inventory.read", "expected": { "auth_id": "2a369701f34d2d9d7e3d71f9c73b4a1d37aea860763c349e758a50336f344f13", "decision": "ALLOW", "reason": "LOCAL_DOMAIN_AUTHORIZED", "state_root": "8963831db4b4eb8ef8e2af1e7dd148af3f332a1b5263e61d171024a456a6c53f" }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-001" }, { "description": "capability outside contract", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "CAPABILITY_NOT_IN_CONTRACT", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.write", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "ZWizeY7ZASk0gqlI9PEBKeHrS9lIAKJrffcl+eYirUf0gNCiA8O4Env5twgbUwrYmeRxGUsVyp1mGKbG4jUABw==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-002" }, { "description": "rogue signer", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "BAD_REQUEST_SIGNATURE", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "Tw5wtaCY1U5S3pVQGTDaBG564oFUn7QfNXv4+hThDElYtZqTgfbfi3oyXOObYzUYuWYu7ZIJ1gpGeT1x9AiKDg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-003" }, { "description": "non-party requester", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "REQUESTER_NOT_PARTY", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "C", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "ERXposL+ZWg6D1e0fEhGlT6aTl6W6Pocq/EaQlM0WpwF3ooGYzxef17hgbVy84KPUnxfBy3lGqx0ldFD0TXRDA==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-004" }, { "description": "identity substitution", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "IDENTITY_MISMATCH", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-admin", "schema": "cain.govfederation.request.v1", "sig": "Udzl6w0Pk4YBjRs+1S/KMb5bKkl6ylxjrDbXNgOA1u9XVML7QP/eWC1kS1dx788vIXUyKw49U5tIudp8Qke7DQ==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-005" }, { "description": "epoch mismatch", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "EPOCH_MISMATCH", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 2, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "KVoilSwXTyUK0CB+sdlTlRgFKaB19c63gCYfggQGbYLdFSvvYceEJfX1JDsF5pB4CpEWk0Ik1AnrH6AFFicjDA==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-006" }, { "description": "stale request", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "STALE_REQUEST", "state_root": null }, "kind": "gate", "now_ms": 1000, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-007" }, { "description": "assurance revoked -> degraded", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "FEDERATION_DEGRADED", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "DEGRADED", "usage": 0, "version": 1 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [ "asr-A-1" ], "seen_nonces": [] }, "vector_id": "E37-TV-008" }, { "description": "runtime drift", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "INTEGRITY_DRIFT:runtime", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:x", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "65WKA4lDk7o7e9TeEiJjpLhJ3QLse6lD4HZO61fw7pddu9DkiCP7/hP+9Jp/Bz2IsDGFjdgNWRDCx9dFiMHaDQ==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-009" }, { "description": "open dispute", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "DISPUTE_IS_NOT_APPROVAL", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": { "d": { "appeal": "", "claim": "c", "contract": "", "counterclaim": "", "decision": "", "dispute_id": "d", "domain_a": "A", "domain_b": "B", "evidence_a": "", "evidence_b": "", "federation_id": "fed-A-B", "history": [ "OPEN" ], "is_approval": false, "policy_context": "", "resolution": "", "schema": "cain.govfederation.dispute.v1", "state": "OPEN", "subject": "fed-A-B", "verification_results": [] } }, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 1 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-010" }, { "description": "hidden delegation", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "DELEGATION_NOT_IN_CONTRACT", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": { "on_behalf_of": "C" }, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "lPHELvdODqrw6D8EULPGYt+RAc+IShfAL0I3OK+YzPtQ1mnfRttN6FFGaymLLHM2qxx17Cp0XekYlKAMAa1oAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-011" }, { "description": "collective union amplification", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "COLLECTIVE_AUTHORITY_AMPLIFICATION", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": { "m1": { "capabilities": [ "inventory.read" ] }, "m2": { "capabilities": [ "orders.read" ] } }, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "kchbzPyoJ4pAmThHlLVcHSoVONX51nT4tH0wscVacpPY+OzNAkPXNaXQWDfibfbUFEjNMKQgQNI7zjmemsHwCg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-012" }, { "description": "boundary: data", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "SOVEREIGNTY_BOUNDARY", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "payroll", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "vJAtkgaau9ls6r7YDO7dn6eb3m/32MxHUMJDrqqIoqxvv3upnpm4r3wYokyTm/Hvae21mk7ClOocFIuadrgHBw==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-013" }, { "description": "local policy DENY", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "LOCAL_POLICY_DENY", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "DENY", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-014" }, { "description": "local policy UNKNOWN", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "LOCAL_POLICY_UNKNOWN", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-015" }, { "description": "local authority shrunk", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "CAPABILITY_NOT_IN_LOCAL_AUTHORITY", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-016" }, { "description": "budget exceeded", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "FEDERATION_BUDGET_EXCEEDED", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 11, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "1GCuOaxlhQcvLHw8AHzUfI+vQGPm9NCvtGVIU6rjVFkaAJHyeKPsPxTzrnEQ79MkNPszLBQ5rmYuUG+CABy5BA==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-017" }, { "description": "nonce replay", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "NONCE_REPLAY", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 1, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [ "n-1" ] }, "vector_id": "E37-TV-018" }, { "description": "assurance stale (partition)", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "ASSURANCE_STALE", "state_root": null }, "kind": "gate", "now_ms": 20000, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 20000, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "J2d4xbVwB5dmxGhc0OuOmU/t87wn4GXM3ThxHwPQaw9Prpb20JR8hmrnw6nmkMiujoU3zhcGIFvCOZNRircEBg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-019" }, { "description": "suspended (emergency)", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "FEDERATION_SUSPENDED", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "SUSPENDED", "usage": 0, "version": 1 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-020" }, { "description": "unknown federation", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "UNKNOWN_FEDERATION", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-unknown", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "CodvwMY2AikMh43OM88A0NdCLPUisYAjxm1i7rsmB8qAFseAPwNmm0va/UKhl+XLc3lGTD3YbaWQAK2SzqPbAQ==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": null, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-021" }, { "description": "wrong target domain", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "WRONG_TARGET_DOMAIN", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "pWfNk3RVAftx0gVNrE0TH2DlPFFjRS/lClbT/yUbaykGkwZZAuHtvcYZuqH495Yl1Y1uAr6S8moSYBn5DKvpDQ==", "target_domain": "C" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-022" }, { "description": "federation expired", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "FEDERATION_EXPIRED", "state_root": null }, "kind": "gate", "now_ms": 100001, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100001, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "s5/xM7wiYExJubWUFYMvyMDAL+xDR3/V8l2B7jcoUcleqcDJCJt2Ggmw3uKWiWwr9/7Yaq0pjl0KymnGGxCFCg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 0, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-023" }, { "description": "fork-contested", "expected": { "auth_id": null, "decision": "BLOCK", "reason": "FEDERATION_CONTESTED", "state_root": null }, "kind": "gate", "now_ms": 100, "request": { "amount": 1, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "huwgzN+2p63uHpD9tWiuq8CYpgy+v76nuYDbU/URHeoKStZhPF0odPo1o+bz1snZ47/ZAVCCAPoVRwjLmHOZAg==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "CONTESTED", "usage": 0, "version": 1 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [] }, "vector_id": "E37-TV-024" }, { "description": "authorized after earlier spend", "expected": { "auth_id": "0c7e95111910dac69ebfee8a49e302c5bc72b5a5b1d12fea64011644efd12bc9", "decision": "ALLOW", "reason": "LOCAL_DOMAIN_AUTHORIZED", "state_root": "8963831db4b4eb8ef8e2af1e7dd148af3f332a1b5263e61d171024a456a6c53f" }, "kind": "gate", "now_ms": 100, "request": { "amount": 5, "attestation": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capability": "inventory.read", "collective": {}, "data": "inventory", "delegation": {}, "epoch": 1, "execution": "read", "federation_id": "fed-A-B", "issued_ms": 100, "nonce": "n-1", "requester_domain": "A", "requester_identity": "id-A", "schema": "cain.govfederation.request.v1", "sig": "iMOeUyCw6HagrY5FIs6G0ISwu9LxjAT8/ZebyLacM665yS15SuxyO4A/NG5qyGPxFj71szxv8VLt4LZExEqPCQ==", "target_domain": "B" }, "snapshot": { "assurance_issuers": { "assurer-1": "3gRDE1xLMC4gGb7i9EhBiFmjTeHuuCvSX+PIeYY+5gc=" }, "authority": { "capabilities": [ "inventory.read", "inventory.write" ], "resource_budget": 40, "risk_ceiling": "HIGH" }, "boundary": { "assurance_boundary": [], "authority_boundary": [ "inventory.read", "inventory.write" ], "data_boundary": [ "inventory" ], "domain_id": "B", "execution_boundary": [ "read" ], "identity_boundary": [ "id-A" ], "jurisdiction_boundary": [ "EU" ], "policy_boundary": [], "resource_boundary": [], "trust_boundary": [] }, "domain_id": "B", "federation": { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "execution_constraints": { "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5" }, "federation_id": "fed-A-B", "federation_state_root": "cba9dddad4c3625b30ac577a71ef663b2d61a4af21ed94f32b81002dccd7949b", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "xVkRvRRrJzSgsdMoLAkNM8gcEe2oYEgVhDnpL8gzfDcD2y8TWfY6zYHIV19WVGU0IDQYOrizQRg/c3hYj/A5Dw==", "B": "iFZ5binZDX56ZDkt8zhFsue0ADn/dniAUcWDj5YEGVDMpfTFLU1BhVwnl6c4NYuK7+1A9in5q2aG3FBKJj0NAw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "assurance": { "assurance_basis": "runtime attestation + test evidence", "assurance_id": "asr-A-1", "assurance_level": "A3", "evidence_root": "ev-root-A", "fresh_until": 10000, "grants_authority": false, "issuer": "assurer-1", "limitations": [ "self-assessed fixture" ], "revocation": "assurer-1/revocations", "schema": "cain.govfederation.assurance.v1", "scope": { "attested": { "dependency": "sha256:deps-a-1", "model": "sha256:model-a-1", "runtime": "sha256:runtime-a-1", "tool": "sha256:tool-a-1" }, "capabilities": [ "inventory.read" ] }, "sig": "4Ixa4HMGn99xRlY42pG6teHTHZBOo3KDkVG1CYcYmAKGIa6l5o4W6C69wntu0MI5n5v6zVuvHO+1Hr9iM94sAA==", "subject": "A", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_method": "independent re-verification" }, "contract": { "assurance_requirement": "A3", "authority_scope": [ "inventory.read" ], "capabilities": [ "inventory.read" ], "contract_hash": "eaf03aa67d8d156687a3a55d08623b110175495919ecd8b9ceb16cf6b89c0cb5", "data_scope": [ "inventory" ], "dispute": "CONTEST", "domain_a": "A", "domain_b": "B", "execution_scope": [ "read" ], "federation_id": "fed-A-B", "freshness": 100, "governance_epoch": 1, "grants_authority": false, "integrity_requirement": "VERIFIED", "negotiation_root": "4ed3d93cfa8c482d0e851a6bbd2b5595029800f42e4b49f58b4b5f7baa442278", "purpose": "read authorized inventory", "resource_scope": 10, "revocation": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.contract.v1", "termination": "EXPIRY", "trust_requirement": "0.8", "validity": { "from_ms": 0, "until_ms": 100000 }, "verification_requirement": [ "integrity" ] }, "disputes": {}, "remote": "A", "status": "ACTIVE", "usage": 5, "version": 0 }, "governance_pub": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=", "peers": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "policy": { "inventory.read": "ALLOW", "inventory.write": "DENY" }, "revoked_ids": [], "seen_nonces": [ "pre" ] }, "vector_id": "E37-TV-025" }, { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "none", "execution_constraints": { "contract_hash": "3e83504ea06a989c422329f86d4bf734eb60b8af25c9564a601b63c8cfe48d4d" }, "federation_id": "fed-A-B", "federation_state_root": "cd3511055eb517bb7f9124d247f2773b842be0001dedb53e82b457e7662ea7f7", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "RVteOM11jsD4TW6lOaw7+gB8T4cY9KUHf6Oq7I7GuSpYFF0m6dZbBsLnvKHL74h5HbV2v5Dwuxi8wzbiSjlMDw==", "B": "uLrZMKQsKnGK3lo0RnFDph0ZHYfKB8986B5Bx0mLPQnlZU8bqksofUfqAzppoIxrz33wRYIfABXDAKLlqTEFBA==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "expected": { "afo_hash": "147715b2b73e4e2f3b626e02e3e8b07181629a27c93fb61fc5e23423cad992c7", "error": null }, "kind": "afo", "pins": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "vector_id": "E37-AFO-001" }, { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "none", "execution_constraints": { "contract_hash": "3e83504ea06a989c422329f86d4bf734eb60b8af25c9564a601b63c8cfe48d4d" }, "federation_id": "fed-A-B", "federation_state_root": "cd3511055eb517bb7f9124d247f2773b842be0001dedb53e82b457e7662ea7f7", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "MEDIUM", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "RVteOM11jsD4TW6lOaw7+gB8T4cY9KUHf6Oq7I7GuSpYFF0m6dZbBsLnvKHL74h5HbV2v5Dwuxi8wzbiSjlMDw==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "expected": { "afo_hash": "147715b2b73e4e2f3b626e02e3e8b07181629a27c93fb61fc5e23423cad992c7", "error": "MISSING_SIGNATURE:B" }, "kind": "afo", "pins": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "vector_id": "E37-AFO-002" }, { "afo": { "accepted_assurance_levels": [ "A3", "A4" ], "accepted_capabilities": [ "inventory.read" ], "accepted_proof_types": [ "FEDERATED_GOVERNANCE_PATH_PROOF" ], "accepted_protocols": [ "AGN/1" ], "assurance_roots": { "A": "asr-A", "B": "asr-B" }, "authority_roots": { "A": "auth-A", "B": "auth-B" }, "capability_roots": { "A": "cap-A", "B": "cap-B" }, "dispute_policy": "CONTEST", "domain_a": "A", "domain_b": "B", "domain_identities": { "A": "id-A", "B": "id-B" }, "evidence_root": "none", "execution_constraints": { "contract_hash": "3e83504ea06a989c422329f86d4bf734eb60b8af25c9564a601b63c8cfe48d4d" }, "federation_id": "fed-A-B", "federation_state_root": "cd3511055eb517bb7f9124d247f2773b842be0001dedb53e82b457e7662ea7f7", "freshness_requirement": 100, "governance_epoch": 1, "governance_roots": { "A": "gov-A", "B": "gov-B" }, "grants_authority": false, "resource_limits": { "resource": 10 }, "revocation_policy": "DEGRADE", "risk_ceiling": "CRITICAL", "schema": "cain.govfederation.afo.v1", "signatures": { "A": "RVteOM11jsD4TW6lOaw7+gB8T4cY9KUHf6Oq7I7GuSpYFF0m6dZbBsLnvKHL74h5HbV2v5Dwuxi8wzbiSjlMDw==", "B": "uLrZMKQsKnGK3lo0RnFDph0ZHYfKB8986B5Bx0mLPQnlZU8bqksofUfqAzppoIxrz33wRYIfABXDAKLlqTEFBA==" }, "termination_policy": "EXPIRY", "trust_roots": { "A": "trust-A", "B": "trust-B" }, "validity_window": { "from_ms": 0, "until_ms": 100000 }, "verification_roots": { "A": "ver-A", "B": "ver-B" } }, "expected": { "afo_hash": "5d33a2befb97e7365bc447b8f779b5699b144b4818b7a71ecc4e03a4d89057dc", "error": "AFO_STATE_ROOT_MISMATCH" }, "kind": "afo", "pins": { "A": "RssW5yly6am6eVskftkZ37oIK/dVeSRrNvasgO7isg0=", "B": "tnWSfEsgy6aLzqqHNADTu8/HyK6+xKO8DznhCrIBsuc=" }, "vector_id": "E37-AFO-003" }, { "expected": { "fork_seqs": [] }, "histories": { "A": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 }, { "afo_hash": "a1", "contract_hash": "c1", "seq": 1 } ], "B": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 }, { "afo_hash": "a1", "contract_hash": "c1", "seq": 1 } ] }, "kind": "fork", "vector_id": "E37-FORK-001" }, { "expected": { "fork_seqs": [] }, "histories": { "A": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 }, { "afo_hash": "a1", "contract_hash": "c1", "seq": 1 } ], "B": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 } ] }, "kind": "fork", "vector_id": "E37-FORK-002" }, { "expected": { "fork_seqs": [ 1 ] }, "histories": { "A": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 }, { "afo_hash": "a1", "contract_hash": "c1", "seq": 1 } ], "B": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 }, { "afo_hash": "a1", "contract_hash": "cX", "seq": 1 } ] }, "kind": "fork", "vector_id": "E37-FORK-003" }, { "expected": { "fork_seqs": [ 0 ] }, "histories": { "A": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 }, { "afo_hash": "a1", "contract_hash": "c1", "seq": 1 } ], "B": [ { "afo_hash": "a0", "contract_hash": "c0", "seq": 0 }, { "afo_hash": "a1", "contract_hash": "c1", "seq": 1 } ], "C": [ { "afo_hash": "a0", "contract_hash": "cY", "seq": 0 } ] }, "kind": "fork", "vector_id": "E37-FORK-004" } ] }