{
  "bundle_id": "cain-14-agentic-trust-v2",
  "bundle_type": "agentic_trust_intelligence_evidence",
  "published_at": "2026-09-15T12:00:00Z",
  "cain_version": "14.0.0",
  "system": "CAIN 14.0 Agentic Trust Intelligence Engine",
  "status": "OPERATIONAL_AND_VERIFIED",
  "core_doctrine": "CAIN MUST NOT TRUST AN AGENT MERELY BECAUSE THE AGENT IS CAPABLE, CONFIDENT, CONSISTENT, OR CORRECT ON PREVIOUS TASKS. CAIN MUST CONTINUOUSLY ESTABLISH WHO THE AGENT IS, WHAT THE AGENT KNOWS, WHAT THE AGENT BELIEVES, WHAT THE AGENT IS TRYING TO ACHIEVE, WHAT PLAN THE AGENT IS EXECUTING, WHAT MEMORY INFLUENCED THE PLAN, WHAT TOOLS AND OTHER AGENTS THE AGENT CAN REACH, WHAT AUTHORITY WAS DELEGATED, WHAT CONSEQUENCES ARE PREDICTED, WHAT ACTUALLY HAPPENED, WHERE THE AGENT WAS WRONG, AND WHETHER ITS CURRENT BEHAVIOR REMAINS INSIDE ITS AUTHORIZED TRUST ENVELOPE.",
  "invariants_summary": {
    "total_invariants": 200,
    "evaluated": 200,
    "passed": 200,
    "failed": 0,
    "domains": [
      {"domain": "AGENT_IDENTITY_AND_ATTESTATION", "invariants": 15, "passed": 15},
      {"domain": "GOAL_AND_INTENT_INTEGRITY", "invariants": 14, "passed": 14},
      {"domain": "PLAN_INTEGRITY_AND_CONTROL", "invariants": 14, "passed": 14},
      {"domain": "WORLD_MODEL_AND_BELIEF", "invariants": 12, "passed": 12},
      {"domain": "MEMORY_SOVEREIGNTY_AND_PROVENANCE", "invariants": 15, "passed": 15},
      {"domain": "TOOL_CALL_INTEGRITY", "invariants": 14, "passed": 14},
      {"domain": "MCP_TRANSPARENT_BOUNDARY", "invariants": 14, "passed": 14},
      {"domain": "AGENT_TO_AGENT_TRUST_FABRIC", "invariants": 14, "passed": 14},
      {"domain": "INDIRECT_INJECTION_DEFENSE", "invariants": 12, "passed": 12},
      {"domain": "AGENTIC_RISK_AND_BLAST_RADIUS", "invariants": 12, "passed": 12},
      {"domain": "COMPUTER_BROWSER_CONTROL", "invariants": 12, "passed": 12},
      {"domain": "AGENTIC_INCIDENT_CONTAINMENT", "invariants": 12, "passed": 12},
      {"domain": "AGENTIC_OBSERVABILITY_TELEMETRY", "invariants": 12, "passed": 12},
      {"domain": "EVALUATION_AND_CONTAMINATION", "invariants": 10, "passed": 10},
      {"domain": "SKILL_EXTENSION_SECURITY", "invariants": 10, "passed": 10},
      {"domain": "FRONTIER_RESEARCH_INTEGRATION", "invariants": 10, "passed": 10}
    ]
  },
  "adversarial_redteam_suite": {
    "total_vectors": 120,
    "blocked_fail_closed": 120,
    "block_rate": "100%",
    "attack_categories": [
      "OWASP_ASI01_AGENT_GOAL_HIJACKING",
      "OWASP_ASI02_INDIRECT_PROMPT_INJECTION",
      "OWASP_ASI03_TOOL_CHAIN_EXPLOITATION",
      "OWASP_ASI04_CROSS_TENANT_MEMORY_POISONING",
      "OWASP_ASI05_DELEGATION_AND_TRUST_LAUNDERING",
      "OWASP_ASI06_WORLD_MODEL_HALLUCINATION_EXPLOIT",
      "OWASP_ASI07_BROWSER_SIDE_EXECUTION_ESCAPE",
      "OWASP_ASI08_SKILL_TAMPERING_AND_SUBVERSION",
      "OWASP_ASI09_SALAMI_BUDGET_EXFILTRATION",
      "OWASP_ASI10_CONTAINMENT_BYPASS_ATTEMPT",
      "OWASP_AST10_AGENT_SUPPLY_CHAIN_COMPROMISE",
      "BYZANTINE_FORK_AND_STATE_DESYNC_ATTACK"
    ]
  },
  "triple_verification_results": {
    "engine_a_production": {"verdict": "VERIFIED", "invariants_checked": 200, "passed": 200},
    "engine_b_clean_room": {"verdict": "VERIFIED", "standalone": true, "cain_imports": 0, "passed": 200},
    "engine_c_verifier_of_verifiers": {"verdict": "VERIFIED", "meta_corruption_tests": 8, "corruption_detected": 8}
  },
  "canonical_hash": "75a1c0a79e5e3dfd6f07ca86410b0cdbad1d22c68ec8d9700b3a5337c91ab623",
  "frontier_knowledge_hash": "28264f3f5916f5e3db907cc89f7577537f4dc21503f431b24b569fc0b1308fee"
}