CAIN-42 Evolution 38 — Portable Proof-Carrying Machine Agency

TESTED library · not hosted · not third-party reviewed · zero-knowledge proofs not implemented.

"Here is the governance proof. Verify it yourself." Each governed action carries twelve signed layer proofs and one action proof. A verifier with none of our code recomputes the verdict for every case below.

5 real action proofs; 41 proof cases; invariants 1030/1030; adversarial scenarios 2141/2141; mutation 15/15; chaos 0 of 19 faults more permissive; self-test 22/22; tests 20 passed / 0 failed; clean-room verifier INTACT (509/509).

Proof cases (independently recomputed)

Case	Expected	CAIN verdict
real-0	VALID	VALID
real-1	VALID	VALID
real-2	VALID	VALID
real-3	VALID	VALID
real-4	VALID	VALID
forged-IDENTITY	INVALID	INVALID
missing-IDENTITY	INCOMPLETE	INCOMPLETE
forged-CAPABILITY	INVALID	INVALID
missing-CAPABILITY	INCOMPLETE	INCOMPLETE
forged-DELEGATION	INVALID	INVALID
missing-DELEGATION	INCOMPLETE	INCOMPLETE
forged-POLICY	INVALID	INVALID
missing-POLICY	INCOMPLETE	INCOMPLETE
forged-RISK	INVALID	INVALID
missing-RISK	INCOMPLETE	INCOMPLETE
forged-EVIDENCE	INVALID	INVALID
missing-EVIDENCE	INCOMPLETE	INCOMPLETE
forged-AUTHORIZATION	INVALID	INVALID
missing-AUTHORIZATION	INCOMPLETE	INCOMPLETE
forged-COMMIT	INVALID	INVALID
missing-COMMIT	INCOMPLETE	INCOMPLETE
forged-EXECUTION	INVALID	INVALID
missing-EXECUTION	INCOMPLETE	INCOMPLETE
forged-OUTCOME	INVALID	INVALID
missing-OUTCOME	INCOMPLETE	INCOMPLETE
forged-ENVIRONMENT	INVALID	INVALID
missing-ENVIRONMENT	INCOMPLETE	INCOMPLETE
forged-ENFORCEMENT	INVALID	INVALID
missing-ENFORCEMENT	INCOMPLETE	INCOMPLETE
revoked-DELEGATION	REVOKED	REVOKED
revoked-POLICY	REVOKED	REVOKED
revoked-COMMIT	REVOKED	REVOKED
revoked-agent	REVOKED	REVOKED
stale-self	STALE	STALE
stale-dependency	STALE	STALE
unresolved	UNKNOWN	UNKNOWN
confusion-kind	INVALID	INVALID
predicted-outcome	INCOMPLETE	INCOMPLETE
no-e8	INCOMPLETE	INCOMPLETE
foreign-issuer	INVALID	INVALID
circular	INVALID	INVALID

Adversarial categories

Category	Held
authority	12/12
certificate	7/7
completeness	91/91
composition	152/152
conformance	187/187
coverage	52/52
cross_domain	176/176
delegation	1/1
dependency	19/19
disclosure	14/14
economic	4/4
federation	64/64
freshness	22/22
governance	22/22
handshake	63/63
identity	16/16
law	42/42
manifest	35/35
negotiation	53/53
physical_hybrid	36/36
proof	381/381
protocol	90/90
receipt	38/38
recovery	6/6
revocation	32/32
runtime	6/6
secrecy	31/31
status	226/226
supply_chain	5/5
translation	131/131
transparency	38/38
trust_state	66/66
world	23/23

Limitations

In-process TESTED library on one host; the second trust domain and the eleven conformance counterparts are reference/mock implementations, not real vendors.
CAIN-GIP v2 is a reference interchange layer carried in MCP/A2A/HTTP/... messages in-process; it is not an Internet, MCP or A2A standard and no live MCP/A2A server integration was tested.
Zero-knowledge proofs are NOT IMPLEMENTED; selective disclosure is salted commitments + RFC 6962 inclusion.
Hardware attestation is UNKNOWN (no TEE on this host); third-party verification is NOT AVAILABLE.
Revocation propagation is measured in-process across subscriber domains; network propagation is NOT TESTED.
Action proofs bind governance conditions and provenance; they do not show that an action was safe, correct or truthful.
Claim graph: 10 of 64 public claims are fully linked; the rest are NOT FULLY VERIFIED, mostly because older bundles carry no source commitments or test results.
Not hosted, no customers, not third-party reviewed.