{
  "bundle_type": "adversarial_defense_evidence",
  "published_at": "2026-09-12T23:20:00Z",
  "system": "CAIN Adversarial Trust Engine",
  "audit_cluster_id": "cluster-cain-001",
  "auditing_node": "node2",
  "defense_summary": {
    "total_attack_vectors": 13,
    "attacks_blocked": 13,
    "attacks_succeeded": 0,
    "defense_success_rate": "100.0%",
    "fail_closed_guarantee": "VERIFIED"
  },
  "attack_vector_results": [
    {
      "id": "adv-01",
      "name": "forged_node_identity",
      "category": "CRYPTOGRAPHIC_IDENTITY",
      "verdict": "PASS",
      "enforcement_action": "QUARANTINE_NODE",
      "detail": "Impostor node with invalid signature quarantined immediately",
      "evidence_id": "ev-adv-4af4ee2fd77fda52"
    },
    {
      "id": "adv-02",
      "name": "forged_trust_state",
      "category": "TRUST_STATE_INTEGRITY",
      "verdict": "PASS",
      "enforcement_action": "APPLY_NEGATIVE_DOMINANCE",
      "detail": "Trust score inflation intercepted; negative dominance applied floor=0.10",
      "evidence_id": "ev-adv-e5843eeed462dec1"
    },
    {
      "id": "adv-03",
      "name": "replayed_cluster_message",
      "category": "REPLAY_DEFENSE",
      "verdict": "PASS",
      "enforcement_action": "DROP_AND_RECORD_EVIDENCE",
      "detail": "Identical envelope ID dropped; replay incident recorded",
      "evidence_id": "ev-adv-6571888c31e3143f"
    },
    {
      "id": "adv-04",
      "name": "stale_authorization",
      "category": "TEMPORAL_FRESHNESS",
      "verdict": "PASS",
      "enforcement_action": "FAIL_CLOSED_DENY",
      "detail": "Stale message exceeding 30s freshness window rejected fail-closed",
      "evidence_id": "ev-adv-8debb1369618103f"
    },
    {
      "id": "adv-05",
      "name": "revoked_authority",
      "category": "KEY_REVOCATION",
      "verdict": "PASS",
      "enforcement_action": "REJECT_REVOKED_SIGNATURE",
      "detail": "Signature from revoked key rejected with KEY_REVOKED incident",
      "evidence_id": "ev-adv-03b4c66eab9d266a"
    },
    {
      "id": "adv-06",
      "name": "sequence_rollback",
      "category": "MONOTONIC_SEQUENCE",
      "verdict": "PASS",
      "enforcement_action": "DROP_AND_RECORD_EVIDENCE",
      "detail": "Sequence rollback attempt (10 -> 5) detected and suppressed",
      "evidence_id": "ev-adv-907ffa319b3b567c"
    },
    {
      "id": "adv-07",
      "name": "evidence_modification",
      "category": "EVIDENCE_IMMUTABILITY",
      "verdict": "PASS",
      "enforcement_action": "HASH_MISMATCH_DETECTED",
      "detail": "Modified evidence payload immediately detected via SHA-256 Merkle proof",
      "evidence_id": "ev-adv-4786107ef997a62e"
    },
    {
      "id": "adv-08",
      "name": "policy_rollback",
      "category": "POLICY_GOVERNANCE",
      "verdict": "PASS",
      "enforcement_action": "FAIL_CLOSED_DENY",
      "detail": "Outdated policy injection detected as policy drift; fail-closed deny enforced",
      "evidence_id": "ev-adv-b48b3807d7bbd1c3"
    },
    {
      "id": "adv-09",
      "name": "tenant_crossing",
      "category": "TENANT_ISOLATION",
      "verdict": "PASS",
      "enforcement_action": "FAIL_CLOSED_DENY",
      "detail": "Cross-tenant access from tenant_a to tenant_b denied with zero data leakage",
      "evidence_id": "ev-adv-a3a32af3b29c19f2"
    },
    {
      "id": "adv-10",
      "name": "partition_behavior",
      "category": "SPLIT_BRAIN_DEFENSE",
      "verdict": "PASS",
      "enforcement_action": "QUORUM_LOST_FAIL_CLOSED",
      "detail": "Sub-quorum partition immediately failed closed for all consequential deletes",
      "evidence_id": "ev-adv-b71819cff261bd0d"
    },
    {
      "id": "adv-11",
      "name": "compromised_node_simulation",
      "category": "NODE_QUARANTINE",
      "verdict": "PASS",
      "enforcement_action": "STRIP_VOTING_AUTHORITY",
      "detail": "Compromised node automatically quarantined and stripped of voting authority",
      "evidence_id": "ev-adv-9069515dd6b07fda"
    },
    {
      "id": "adv-12",
      "name": "fail_open_attempts",
      "category": "FAIL_CLOSED_INVARIANT",
      "verdict": "PASS",
      "enforcement_action": "STRICT_FAIL_CLOSED",
      "detail": "All non-ALLOW decision states (UNKNOWN, ERROR, MALFORMED) strictly blocked",
      "evidence_id": "ev-adv-48db9d23f80667be"
    },
    {
      "id": "adv-13",
      "name": "configuration_tampering",
      "category": "CONFIGURATION_GOVERNANCE",
      "verdict": "PASS",
      "enforcement_action": "HASH_MISMATCH_REJECTION",
      "detail": "Configuration tampering detected: canonical hash mismatch triggers lockdown",
      "evidence_id": "ev-adv-ed874f3ee758662b"
    }
  ]
}