{
  "bundle_id": "cain-cluster-4node-bft-v2",
  "bundle_type": "distributed_cluster_bft_evidence",
  "published_at": "2026-09-16T06:00:00Z",
  "cain_version": "2.0.0-distributed",
  "cluster_id": "cluster-cain-001",
  "system": "CAIN Distributed Trust Fabric Multi-Node Cluster",
  "status": "OPERATIONAL_AND_VERIFIED",
  "cluster_topology": {
    "total_nodes": 4,
    "quorum_threshold": 3,
    "byzantine_fault_tolerance_f": 1,
    "byzantine_f1_readiness": "PROVEN",
    "formula": "N >= 3f + 1 where f=1, Q = 2f + 1 = 3",
    "nodes": [
      {
        "node_id": "node1",
        "role": "bootstrap_validator",
        "endpoint": "http://149.28.193.50:19023",
        "state": "healthy",
        "trust_state": "trusted",
        "attestation_verified": true
      },
      {
        "node_id": "node2",
        "role": "production_gateway_runtime",
        "endpoint": "http://45.76.60.231:8420",
        "state": "healthy",
        "trust_state": "trusted",
        "attestation_verified": true
      },
      {
        "node_id": "node3",
        "role": "consensus_peer_validator",
        "endpoint": "http://45.76.169.191:8420",
        "state": "healthy",
        "trust_state": "trusted",
        "attestation_verified": true
      },
      {
        "node_id": "node4",
        "role": "consensus_peer_validator",
        "endpoint": "http://207.246.66.130:8420",
        "state": "healthy",
        "trust_state": "trusted",
        "attestation_verified": true
      }
    ],
    "container_mesh": [
      {"name": "cain-cluster-node-1", "host_port": 18421, "container_port": 8420, "network": "cain-cluster-net"},
      {"name": "cain-cluster-node-2", "host_port": 18422, "container_port": 8420, "network": "cain-cluster-net"},
      {"name": "cain-cluster-node-3", "host_port": 18423, "container_port": 8420, "network": "cain-cluster-net"},
      {"name": "cain-cluster-node-4", "host_port": 18424, "container_port": 8420, "network": "cain-cluster-net"}
    ]
  },
  "consensus_and_security_invariants": {
    "total_invariants_checked": 8,
    "passing_count": 8,
    "status": "ALL_VERIFIED",
    "invariants": [
      {"id": "BFT-01", "name": "BYZANTINE_FAULT_TOLERANCE_PROVEN", "result": "PASS", "detail": "N=4 tolerates 1 arbitrary Byzantine or compromised node while reaching quorum (Q=3)"},
      {"id": "BFT-02", "name": "AUTHENTICATED_GOSSIP_ENVELOPE", "result": "PASS", "detail": "All cross-node messages enclosed in 7-stage signed NodeMessageEnvelope with replay rejection"},
      {"id": "BFT-03", "name": "VECTOR_CLOCK_CONVERGENCE", "result": "PASS", "detail": "Concurrent transitions converge to causal supremum without clock rollback or corruption"},
      {"id": "BFT-04", "name": "DETERMINISTIC_NEGATIVE_DOMINANCE", "result": "PASS", "detail": "Partition recovery conflicts resolve with negative trust evidence strictly dominating"},
      {"id": "BFT-05", "name": "SUB_QUORUM_FAIL_CLOSED", "result": "PASS", "detail": "Partitions dropping below quorum threshold (Q < 3) strictly refuse authoritative writes"},
      {"id": "BFT-06", "name": "PROBATION_RECOVERY_LIFECYCLE", "result": "PASS", "detail": "Quarantined nodes enforce QUARANTINED -> PROBATION -> VERIFIED -> RESTORED state machine"},
      {"id": "BFT-07", "name": "EPHEMERAL_ACTION_TOKEN_JIT", "result": "PASS", "detail": "Microsecond TTL ActionCapabilityTokens verified at MCPGate boundary with single-use nonces"},
      {"id": "BFT-08", "name": "ZERO_SECRET_LEAKAGE_OBSERVABILITY", "result": "PASS", "detail": "Prometheus /metrics scrubs all private keys, shared secrets, and PII from metric labels"}
    ]
  },
  "live_verification_commands": {
    "cluster_status": "curl -s https://cainstudio.online/api/v1/cluster/status | jq .",
    "cluster_nodes": "curl -s https://cainstudio.online/api/v1/cluster/nodes | jq .",
    "cluster_health": "curl -s https://cainstudio.online/api/v1/cluster/health | jq .",
    "cluster_attestation": "curl -s https://cainstudio.online/api/v1/cluster/attestation | jq .",
    "cluster_metrics": "curl -s https://cainstudio.online/metrics | grep cain_cluster",
    "mcpgate_cluster_status": "curl -s https://mcpgate.online/api/v1/cluster/status | jq ."
  }
}