CAIN-42 Evolution 7 + 8 — predictive consequence governance & the mandatory governance kernel

TESTED PRE-PRODUCTION no third-party review

Evolution 7 predicts the consequence of an action against a governed world state, bounds authority by uncertainty, and never lets a prediction become authority. Evolution 8 is the action-commit boundary: a signed, short-lived, single-use governance token bound to the exact action is checked before execution. Both are wired restriction-only into the CAIN-45 agent hypervisor (ZoD): they can refuse, never grant.

Invariants: Evolution 7 12/12 hold; Evolution 8 22/22 hold.
Tests: 65 passed, 0 failed — ============================== 65 passed in 1.61s ==============================.
Clean-room verifier (imports no CAIN-42 code): verify_e7_e8.py.txt · REPRODUCE.txt.
Signed proofs: Evolution 7 · Evolution 8 · master · manifest.

What this does not show: that the code is correct, that CAIN-42 is certified, or that any third party has reviewed it. SIMULATION IS NOT PROOF OF SAFETY; A PREDICTION IS NOT AUTHORITY; ACTUAL EVIDENCE OUTRANKS PREDICTION.

Evolution 7 invariants I1–I12

#	Invariant	Result	Detail
I1	SIMULATION CANNOT GRANT AUTHORITY	HOLDS	`NONE`
I2	PREDICTION CANNOT OVERRIDE POLICY	HOLDS	`DENY`
I3	UNCERTAINTY CANNOT INCREASE AUTHORITY	HOLDS	`1.0>0.6>0.0`
I4	STALE WORLD STATE INVALIDATES AFFECTED AUTHORIZATION	HOLDS	`root changed`
I5	MATERIAL CAPABILITY MUTATION INVALIDATES AFFECTED AUTHORIZATION	HOLDS	`capability mutation changes the bundle root`
I6	ACTUAL EXECUTION EVIDENCE SUPERSEDES PREDICTION	HOLDS	`6b24d562cf86f65669d36f465b63cc40c93a225a595a56a81d46aba7eba605ea`
I7	SIMULATION CANNOT BE REPRESENTED AS EXECUTION	HOLDS	`refused`
I8	SHADOW GOVERNANCE CANNOT ENFORCE ACTIONS	HOLDS	`OBSERVED_ONLY`
I9	PRODUCTION EXECUTION CANNOT SILENTLY DEPEND ON SIMULATION-ONLY STATE	HOLDS	`refused`
I10	CORRELATION IS NEVER SILENTLY CAUSATION	HOLDS	`['a->b:CORRELATION(NOT-CAUSAL-EVIDENCE)']`
I11	COUNTERFACTUAL RESULTS CANNOT BECOME FACTS	HOLDS	`COUNTERFACTUAL`
I12	PREDICTED SAFETY CANNOT OVERRIDE EXPLICIT POLICY PROHIBITION	HOLDS	`no authority`

Evolution 8 invariants K1–K22

#	Invariant	Result	Detail
K1	NO VALID AUTHORIZATION -> NO GOVERNED EXECUTION	HOLDS	`DENIED`
K2	AUTHORIZATION CANNOT BE REPLAYED OUTSIDE ITS WINDOW	HOLDS	`['TOKEN_REPLAY', 'TOKEN_SEQUENCE_REPLAY']`
K3	AUTHORIZATION CANNOT BE TRANSFERRED BETWEEN AGENTS	HOLDS	`['ACTION_PARAMETER_MISMATCH', 'WRONG_AGENT']`
K4	AUTHORIZATION CANNOT BE USED FOR DIFFERENT PARAMETERS	HOLDS	`['ACTION_PARAMETER_MISMATCH']`
K5	CAPABILITY MUTATION INVALIDATES AFFECTED AUTHORIZATION	HOLDS	`['CAPABILITY_ROOT_MISMATCH']`
K6	POLICY MUTATION INVALIDATES AFFECTED AUTHORIZATION	HOLDS	`['POLICY_CHANGED']`
K7	REVOKED AUTHORITY CANNOT EXECUTE	HOLDS	`['TOKEN_REVOKED']`
K8	EXPIRED AUTHORITY CANNOT EXECUTE	HOLDS	`['TOKEN_EXPIRED']`
K9	DELEGATED AUTHORITY CANNOT EXCEED PARENT AUTHORITY	HOLDS	`refused`
K10	CRITICAL ACTIONS REQUIRE MULTI-PARTY AUTHORIZATION	HOLDS	`('MULTI_PARTY_NOT_SATISFIED',)`
K11	THE AGENT CANNOT DISABLE ITS OWN KILL MECHANISM	HOLDS	`['AGENT_STOP:agent:1']`
K12	PREDICTION CANNOT CREATE AUTHORITY	HOLDS	`['TOKEN_SIGNATURE_INVALID']`
K13	ENFORCEMENT DEPTH CLAIMS ARE BOUNDED BY WHAT IS INSTALLED	HOLDS	`depth claim bounded`
K14	SAFE MODES CANNOT SILENTLY PERMIT MUTATION	HOLDS	`DENIED`
K15	UNKNOWN GOVERNANCE STATE CANNOT SILENTLY BECOME ALLOW	HOLDS	`fail-closed`
K16	A BYPASS PATH IS NEVER REPRESENTED AS GOVERNED EXECUTION	HOLDS	`{'ENFORCED': 1, 'MONITORED': 0, 'OBSERVED': 0, 'BYPASSABLE': 1, 'UNKNOWN': 0}`
K17	EVIDENCE MUST IDENTIFY THE EXACT AUTHORIZATION USED	HOLDS	`{'seq': 0, 'decision': 'DENIED', 'state': 'DENIED', 'reasons': ['TOKEN_EXPIRED'], 'action_`
K18	ACTUAL EXECUTION IS COMPARED WITH AUTHORIZED EXECUTION	HOLDS	`[]`
K19	EXECUTION DRIFT IS AN INCIDENT	HOLDS	`['TARGET_DRIFT']`
K20	NO EXECUTION MAY JUMP FROM PROPOSED TO EXECUTED	HOLDS	`refused`
K21	KERNEL EVIDENCE IS HASH-CHAINED AND INTACT	HOLDS	`evidence intact`
K22	A CHANGED WORLD STATE INVALIDATES AFFECTED AUTHORIZATION	HOLDS	`['WORLD_STATE_CHANGED']`

Signer (ephemeral): md8Q1sFxicNp/95NjN8Bp8qTK03i9Cc5p+POmuUWJos=

Back to CAIN