CAIN-INV-0920: Real process confinement for a ZoD on Linux: bubblewrap namespaces + a cgroup v2 leaf per ZoD. What is enfo...

VERIFIED source compiles

Domain	GOVERNED_MEMORY
Tier	ENGINEERING_INNOVATION
Source	`cain45/confine.py`
Mapped tests ran	92
Passed / failed / errored	92 / 0 / 0
Compiles	yes

Mapped tests

scripts/cain42_proof/test_manifest.py

tests/test_cain45_escape.py

tests/test_cain45_fail_closed.py

tests/test_cain45_hypervisor.py

tests/test_e7_seccomp_bundle.py

Generated 2026-10-06T19:15:35Z from git unknown. This page is a republication of the run result; it is not an independent audit.

Same-project verification only. The tests are authored in this repository; no third party has reviewed or reproduced these results. VERIFIED means the mapped tests passed in this run, not that the mechanism is independently correct.