[ { "id": "C01", "http_status": 200, "recorded_at": "2026-11-03T22:54:31+00:00", "ms": 32, "reply": { "guard": "drone-airspace", "carve_out": 10, "name": "Drone Airspace Authority Guard", "engine": "cain.autonomy.airspace.DroneAirspaceGuard", "verdict": "ALL_ALLOWED", "steps": [ { "step": 1, "op": "command", "what": "takeoff", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "command": "takeoff", "legs": 1, "battery_needed_pct": 20.0, "farthest_from_home_m": 0.0 } }, { "step": 2, "op": "command", "what": "mission", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "command": "mission", "legs": 3, "battery_needed_pct": 24.4, "farthest_from_home_m": 316.2 } }, { "step": 3, "op": "command", "what": "return_to_home", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "command": "return_to_home", "legs": 1, "farthest_from_home_m": 0.0 } } ], "stopped_steps": [], "run_ms": 1.662, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C02", "http_status": 200, "recorded_at": "2026-11-03T22:54:32+00:00", "ms": 46, "reply": { "guard": "drone-airspace", "carve_out": 10, "name": "Drone Airspace Authority Guard", "engine": "cain.autonomy.airspace.DroneAirspaceGuard", "verdict": "STOPPED", "steps": [ { "step": 1, "op": "command", "what": "mission", "verdict": "DENY", "executed": false, "findings": [ { "rule": "NO_FLY_ZONE", "severity": "DENY", "detail": "leg 2 enters no-fly zone HELIPAD-NFZ" } ], "data": { "command": "mission", "legs": 2, "battery_needed_pct": 28.6, "farthest_from_home_m": 626.5 } }, { "step": 2, "op": "command", "what": "mission", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "command": "mission", "legs": 3, "battery_needed_pct": 28.6, "farthest_from_home_m": 626.5 } } ], "stopped_steps": [ 1 ], "run_ms": 0.77, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C03", "http_status": 200, "recorded_at": "2026-11-03T22:54:32+00:00", "ms": 51, "reply": { "guard": "vehicle-odd", "carve_out": 11, "name": "Self-Driving Vehicle ODD Guard", "engine": "cain.autonomy.odd.AutonomousVehicleODDGuard", "verdict": "STOPPED", "steps": [ { "step": 1, "op": "engage", "what": "engage automation", "verdict": "DENY", "executed": false, "findings": [ { "rule": "WEATHER_OUTSIDE_ODD", "severity": "DENY", "detail": "visibility 150 m < 300 m; precipitation 12.0 mm/h > 4.0" } ], "data": {} }, { "step": 2, "op": "monitor", "what": "monitor -> MINIMAL_RISK_CONDITION", "verdict": "DENY", "executed": false, "findings": [ { "rule": "WEATHER_OUTSIDE_ODD", "severity": "DENY", "detail": "visibility 150 m < 300 m; precipitation 12.0 mm/h > 4.0" } ], "data": { "required_action": "MINIMAL_RISK_CONDITION" } }, { "step": 3, "op": "command", "what": "minimal_risk_maneuver", "verdict": "ALLOW", "executed": true, "findings": [ { "rule": "SAFE_STATE", "severity": "INFO", "detail": "minimal_risk_maneuver is never refused" } ], "data": { "command": "minimal_risk_maneuver" } } ], "stopped_steps": [ 1, 2 ], "run_ms": 0.511, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C04", "http_status": 200, "recorded_at": "2026-11-03T22:54:33+00:00", "ms": 47, "reply": { "guard": "perception-integrity", "carve_out": 12, "name": "Sensor Spoofing & Perception Integrity Guard", "engine": "cain.autonomy.perception.PerceptionIntegrityGuard", "verdict": "STOPPED", "steps": [ { "step": 1, "op": "drive", "what": "20 frame(s) at 15 m/s", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "frames": 20, "frames_flagged": 0, "position_trust": "TRUSTED", "dr_gap_m": 0.0, "dr_tolerance_m": 14.27 } }, { "step": 2, "op": "drive", "what": "20 frame(s) at 15 m/s + spoofing", "verdict": "DENY", "executed": false, "findings": [ { "rule": "GNSS_DR_DIVERGENCE", "severity": "DENY", "detail": "GNSS is 18 m from dead reckoning (tolerance 16 m)" } ], "data": { "frames": 20, "frames_flagged": 12, "position_trust": "UNTRUSTED", "dr_gap_m": 40.0, "dr_tolerance_m": 18.77 } }, { "step": 3, "op": "gate", "what": "route (position UNTRUSTED)", "verdict": "DENY", "executed": false, "findings": [ { "rule": "POSITION_UNTRUSTED", "severity": "DENY", "detail": "position is untrusted (possible spoofing); navigation refused until 10 clean frames" } ], "data": { "command": "route", "position_trust": "UNTRUSTED" } }, { "step": 4, "op": "gate", "what": "stop (position UNTRUSTED)", "verdict": "ALLOW", "executed": true, "findings": [ { "rule": "SAFE_STATE", "severity": "INFO", "detail": "stop is never refused" } ], "data": { "command": "stop", "position_trust": "UNTRUSTED" } } ], "stopped_steps": [ 2, 3 ], "run_ms": 10.085, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C05", "http_status": 200, "recorded_at": "2026-11-03T22:54:33+00:00", "ms": 36, "reply": { "guard": "robot-safety", "carve_out": 17, "name": "Collaborative Robot Safety Envelope", "engine": "cain.autonomy.robot_safety.CollaborativeRobotSafetyGuard", "verdict": "ALL_ALLOWED", "steps": [ { "step": 1, "op": "move", "what": "pick at 1.0 m/s", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "robot": "arm-1", "command": "pick" } }, { "step": 2, "op": "effect", "what": "verify the motion's effect", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "position_error_m": 0.0024, "tolerance_m": 0.01 } }, { "step": 3, "op": "move", "what": "place at 1.0 m/s", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "robot": "arm-1", "command": "place" } } ], "stopped_steps": [], "run_ms": 0.493, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C06", "http_status": 200, "recorded_at": "2026-11-03T22:54:34+00:00", "ms": 49, "reply": { "guard": "robot-safety", "carve_out": 17, "name": "Collaborative Robot Safety Envelope", "engine": "cain.autonomy.robot_safety.CollaborativeRobotSafetyGuard", "verdict": "STOPPED", "steps": [ { "step": 1, "op": "move", "what": "move at 1.2 m/s", "verdict": "DENY", "executed": false, "findings": [ { "rule": "SEPARATION_VIOLATION", "severity": "DENY", "detail": "separation 1.15 m < protective distance 1.21 m at 1.20 m/s (max safe 0.60 m/s)" } ], "data": { "robot": "arm-1", "command": "move", "separation_m": 1.15, "required_separation_m": 1.21, "max_safe_speed_mps": 0.6 } }, { "step": 2, "op": "move", "what": "move at 0.5 m/s", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "robot": "arm-1", "command": "move", "separation_m": 1.15, "required_separation_m": 1.14, "max_safe_speed_mps": 0.6 } }, { "step": 3, "op": "move", "what": "move at 0.2 m/s", "verdict": "DENY", "executed": false, "findings": [ { "rule": "SEPARATION_VIOLATION", "severity": "DENY", "detail": "separation 0.00 m < protective distance 1.11 m at 0.20 m/s (max safe 0.00 m/s)" } ], "data": { "robot": "arm-1", "command": "move", "separation_m": 0.0, "required_separation_m": 1.11, "max_safe_speed_mps": 0.0 } } ], "stopped_steps": [ 1, 3 ], "run_ms": 1.043, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C07", "http_status": 200, "recorded_at": "2026-11-03T22:54:34+00:00", "ms": 49, "reply": { "guard": "human-authority", "carve_out": 14, "name": "Human Authority Gate for Defense Autonomy", "engine": "cain.autonomy.human_authority.HumanAuthorityGate", "verdict": "STOPPED", "steps": [ { "step": 2, "op": "check", "what": "release effector_a on T-0417 · authorized by nobody", "verdict": "DENY", "executed": false, "findings": [ { "rule": "NO_HUMAN_AUTHORIZATION", "severity": "DENY", "detail": "no human authorization record for this action" } ], "data": { "action": "release", "platform": "test-uas-07", "track": "T-0417", "effector": "effector_a" } }, { "step": 3, "op": "check", "what": "release effector_a on T-0417 · authorized by platform_test_uas_07", "verdict": "DENY", "executed": false, "findings": [ { "rule": "MACHINE_SELF_AUTHORIZATION", "severity": "DENY", "detail": "authorization is signed by machine key 'platform_test_uas_07': a platform or AI agent cannot authorize force" } ], "data": { "action": "release", "platform": "test-uas-07", "track": "T-0417", "effector": "effector_a" } } ], "stopped_steps": [ 2, 3 ], "run_ms": 1.021, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C08", "http_status": 200, "recorded_at": "2026-11-03T22:54:35+00:00", "ms": 44, "reply": { "guard": "command-link", "carve_out": 18, "name": "Vehicle Command-Link & OTA Integrity Guard", "engine": "cain.autonomy.command_link.CommandLinkIntegrityGuard", "verdict": "STOPPED", "steps": [ { "step": 1, "op": "command", "what": "gcs-alpha: land seq 100 (signed: none)", "verdict": "DENY", "executed": false, "findings": [ { "rule": "COMMAND_UNSIGNED", "severity": "DENY", "detail": "command is unsigned (MAVLink-v1-style); refused" } ], "data": { "command": "land", "station": "gcs-alpha" } }, { "step": 2, "op": "command", "what": "gcs-alpha: goto seq 101 (signed: rogue_radio)", "verdict": "DENY", "executed": false, "findings": [ { "rule": "STATION_NOT_PAIRED", "severity": "DENY", "detail": "command signed by 'rogue_radio', which is not a paired station" } ], "data": { "command": "goto", "station": "gcs-alpha" } }, { "step": 3, "op": "command", "what": "gcs-alpha: goto seq 102", "verdict": "ALLOW", "executed": true, "findings": [], "data": { "command": "goto", "station": "gcs-alpha" } }, { "step": 4, "op": "command", "what": "gcs-alpha: goto seq 102", "verdict": "DENY", "executed": false, "findings": [ { "rule": "REPLAYED_COMMAND", "severity": "DENY", "detail": "sequence 102 <= last accepted 102 from gcs-alpha" } ], "data": { "command": "goto", "station": "gcs-alpha" } }, { "step": 5, "op": "command", "what": "gcs-alpha: hold seq 103", "verdict": "DENY", "executed": false, "findings": [ { "rule": "STALE_COMMAND", "severity": "DENY", "detail": "timestamp 30.0 s from vehicle time > 2.0 s" } ], "data": { "command": "hold", "station": "gcs-alpha" } } ], "stopped_steps": [ 1, 2, 4, 5 ], "run_ms": 2.755, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } }, { "id": "C09", "http_status": 200, "recorded_at": "2026-11-03T22:54:35+00:00", "ms": 41, "reply": { "guard": "fleet-mission", "carve_out": 13, "name": "Fleet Mission Envelope Guard", "engine": "cain.autonomy.mission.FleetMissionEnvelopeGuard", "verdict": "STOPPED", "steps": [ { "step": 1, "op": "load", "what": "envelope SURVEY-PIPELINE-12 v1 signed by none", "verdict": "DENY", "executed": false, "findings": [ { "rule": "ENVELOPE_UNSIGNED", "severity": "DENY", "detail": "mission envelopes must be signed by a mission authority" } ], "data": {} }, { "step": 2, "op": "load", "what": "envelope SURVEY-PIPELINE-12 v1 signed by vehicle_uas_1", "verdict": "DENY", "executed": false, "findings": [ { "rule": "SIGNER_NOT_MISSION_AUTHORITY", "severity": "DENY", "detail": "signed by key 'vehicle_uas_1', which is not a pinned mission authority (a vehicle or planner cannot task itself)" } ], "data": {} }, { "step": 3, "op": "load", "what": "envelope SURVEY-PIPELINE-12 v1 (edited)", "verdict": "DENY", "executed": false, "findings": [ { "rule": "ENVELOPE_SIGNATURE_INVALID", "severity": "DENY", "detail": "signature does not match: the envelope was changed after signing" } ], "data": {} }, { "step": 5, "op": "check", "what": "uas-1: goto", "verdict": "DENY", "executed": false, "findings": [ { "rule": "NO_MISSION", "severity": "DENY", "detail": "no mission assigns vehicle 'uas-1'" } ], "data": { "vehicle": "uas-1", "command": "goto" } } ], "stopped_steps": [ 1, 2, 3, 5 ], "run_ms": 1.308, "note": "Simulated scenario through the production engine. ALLOW means this guard does not object; the vehicle's certified safety systems and CAIN policy still decide. Nothing real was commanded." } } ]