{
  "bundle_id": "cain-novel-technology-v1",
  "generated_at": "2026-09-10T22:00:00Z",
  "cain_version": "5.0.0",
  "trust_control_loop_version": "1.0.0",
  "proof_protocol": "v1",
  "primitives": {
    "expectation_engine": {
      "name": "Expectation Engine",
      "description": "Records expected outcomes, risk, resource impact, and trajectory before execution",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/control/expectation",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json (test: expectation_outcome_reconciliation)",
      "evidence_record": "Expectation record stored with decision_id",
      "cryptographic_proof": "HMAC-SHA256 signed, chained"
    },
    "outcome_reconciliation": {
      "name": "Outcome Reconciliation",
      "description": "Compares observed vs expected, distinguishes facts from inferences",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/control/reconcile",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json",
      "evidence_record": "Reconciliation record with match_status",
      "cryptographic_proof": "HMAC-SHA256 signed"
    },
    "trust_delta": {
      "name": "Trust Delta",
      "description": "Good behavior increases trust, malicious decreases, within hard policy bounds",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/trust/delta",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json (test: trust_delta_direction)",
      "evidence_record": "Trust delta record with magnitude and direction",
      "cryptographic_proof": "HMAC-SHA256 signed chain"
    },
    "adaptive_authority": {
      "name": "Adaptive Authority",
      "description": "Trust level modulates verification friction based on verified behavior",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/trust/authority",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json",
      "evidence_record": "Authority adjustment record",
      "cryptographic_proof": "HMAC-SHA256 signed"
    },
    "blast_radius_control": {
      "name": "Blast Radius Control",
      "description": "Pre-execution estimation across data, money, infrastructure, identities",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/risk/blast-radius",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json",
      "evidence_record": "Blast radius score with factors",
      "cryptographic_proof": null
    },
    "response_side_defense": {
      "name": "Response-Side Defense",
      "description": "Screens tool responses before next action, detects credential leakage, prompt injection",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/control/screen-response",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/security.json (controls: injection_protection)",
      "evidence_record": "Screen result with classification",
      "cryptographic_proof": null
    },
    "trajectory_trust_fusion": {
      "name": "Trajectory + Trust Fusion",
      "description": "Authorization considers accumulated behavior, not just current request",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/trajectory/fusion",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json",
      "evidence_record": "Trajectory state record",
      "cryptographic_proof": "HMAC-SHA256 signed"
    },
    "cryptographic_trust_chain": {
      "name": "Cryptographic Trust Chain",
      "description": "Trust-state transitions chained with HMAC-SHA256, sequence numbers, previous-state hashes",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/observatory/chain",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json (test: cryptographic_chain_anchor)",
      "evidence_record": "Chain anchor record with signature",
      "cryptographic_proof": "HMAC-SHA256, sequence_number, previous_hash"
    },
    "fail_closed_enforcement": {
      "name": "Fail-Closed Enforcement",
      "description": "Unknown/invalid/revoked/unverifiable/error states default to DENIED",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/control/fail-closed",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/security.json (controls: fail_closed)",
      "evidence_record": "Denial record with reason",
      "cryptographic_proof": null
    },
    "shadow_mode_safety": {
      "name": "Shadow-Mode Safety",
      "description": "Would_execute vs actually_executed tracked, confusion detection",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/control/shadow",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json (test: shadow_mode_safety)",
      "evidence_record": "Shadow decision record",
      "cryptographic_proof": null
    },
    "human_override": {
      "name": "Human Override",
      "description": "High-impact adaptive changes require explicit human approval",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/control/override",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json",
      "evidence_record": "Override request record",
      "cryptographic_proof": "HMAC-SHA256 signed"
    },
    "incident_response": {
      "name": "Incident Response",
      "description": "Automatic containment: revoke/reduce authority, freeze, preserve evidence",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/control/incident",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json",
      "evidence_record": "Incident containment record",
      "cryptographic_proof": "HMAC-SHA256 signed"
    },
    "autonomous_control_policy": {
      "name": "Autonomous Control Policy",
      "description": "Explicit rules for tighten/loosen based on behavior",
      "implementation_status": "PRODUCTION",
      "api_endpoint": "/api/v1/policy/adaptive",
      "source_module": "cain_control_loop.py",
      "test": "/proof/bundle/v1/conformance.json",
      "evidence_record": "Policy adaptation record",
      "cryptographic_proof": "HMAC-SHA256 signed"
    }
  },
  "public_routes": {
    "proof": {
      "url": "/proof",
      "description": "CAIN Proof Center - Human and AI verifiable evidence",
      "method": "GET"
    },
    "evidence": {
      "url": "/api/v1/proof/evidence/{id}",
      "description": "Individual evidence record by ID",
      "method": "GET"
    },
    "conformance": {
      "url": "/proof/bundle/v2/conformance-live-report.json",
      "description": "Machine-readable conformance test results (156 assertions)",
      "method": "GET"
    },
    "adversarial_defense": {
      "url": "/proof/bundle/v2/adversarial-defense-evidence.json",
      "description": "13-vector adversarial red-team defense evidence",
      "method": "GET"
    },
    "statutory_compliance": {
      "url": "/proof/bundle/v2/statutory-compliance-proof.json",
      "description": "EU AI Act & ISO 42001 WORM Notary evidence",
      "method": "GET"
    },
    "actuarial_insurance": {
      "url": "/proof/bundle/v2/actuarial-insurance-underwriting.json",
      "description": "Agent Volatility Index & self-assessed Underwriting Credit Score",
      "method": "GET"
    },
    "swarm_quarantine": {
      "url": "/proof/bundle/v2/swarm-quarantine-audit.json",
      "description": "Durable SQLite WAL Swarm Quarantine & Emergency Halt audit",
      "method": "GET"
    },
    "competitive_matrix": {
      "url": "/proof/bundle/v2/competitive-matrix-evidence.json",
      "description": "Architectural comparison proof vs Palo Alto, Cisco, Lakera",
      "method": "GET"
    },
    "manifest": {
      "url": "/proof/bundle/v1/manifest.json",
      "description": "Proof bundle manifest with all endpoints",
      "method": "GET"
    },
    "cain_proof_well_known": {
      "url": "/.well-known/cain-proof.json",
      "description": "Well-known location for AI/crawler discovery",
      "method": "GET"
    }
  },
  "conformance_summary": {
    "total_tests": 156,
    "passed": 156,
    "failed": 0,
    "status": "100% PASS (VERIFIED)"
  },
  "adversarial_defense_summary": {
    "total_attack_vectors": 13,
    "blocked": 13,
    "defense_rate": "100.0%",
    "status": "VERIFIED"
  },
  "cryptographic_summary": {
    "algorithms": ["Ed25519", "SHA-256", "RFC-3161 Merkle WORM"],
    "signer_node": "node2 (Key ID: 178a262b6a4a1119)",
    "public_key_published": true,
    "replay_protection": "VERIFIED (Sliding window + monotonic sequences)",
    "status": "PRODUCTION_VERIFIED"
  },
  "monetization_engines_live": [
    "CAIN Studio Managed Cloud Subscriptions (/sandbox)",
    "Guarded Action Consumption Metering",
    "MCPGate Sovereign Enterprise K8s Appliance (deploy/helm/mcpgate-boundary)",
    "Continuous Regulatory Compliance-as-a-Service (EU AI Act & ISO 42001)",
    "Actuarial Cyber Insurance Underwriting Protocol (cain.insurance)",
    "Autonomous Swarm Fleet Quarantine & Emergency Kill-Switch API (cain.quarantine)",
    "Vertical Rego Policy & Threat Intelligence Marketplace (cain.opa)",
    "Enterprise SIEM & SOC Connectors (cain.telemetry)"
  ]
}