{ "known_unverified": [ "the older public evidence files under /proof/bundle/ were written before this audit process; only the cluster claim file has been audited so far and it is marked superseded", "AGENTS.md figures (398/398 tests, 120/120 vectors, 200 invariants) have not been re-verified" ], "read_this_first": "Everything here is same-author evidence produced by real runs. Independent checks below re-verify signatures, hashes and recorded agreement without importing CAIN. They do not prove independent failure domains, network-partition behaviour, security, or that any third party has reviewed the work. All three hostnames currently resolve to one machine: identical bytes show consistency, not independence.", "recipes": [ { "bundle": { "cainstudio.online": "https://cainstudio.online/proof/bundle/v2/CAIN42_FRONTIER_TRUST_ENGINE_BUNDLE.json", "clawx.click": "https://clawx.click/evidence/CAIN42_FRONTIER_TRUST_ENGINE_BUNDLE.json", "mcpgate.online": "https://mcpgate.online/proof/bundle/v2/CAIN42_FRONTIER_TRUST_ENGINE_BUNDLE.json" }, "id": "frontier-trust-engine", "verify": "curl -s https://cainstudio.online/proof/bundle/v2/verify_frontier_trust_bundle.py -o v.py && python3 v.py --sites", "what": "trust-engine fixes, 11 attack handlers with positive controls, signed bundle" }, { "bundle": { "cainstudio.online": "https://cainstudio.online/proof/bundle/cluster-fault-test-2026-09-21-run2/bundle.json", "clawx.click": "https://clawx.click/evidence/cluster-fault-test-2026-09-21-run2/bundle.json", "mcpgate.online": "https://mcpgate.online/proof/bundle/cluster-fault-test-2026-09-21-run2/bundle.json" }, "bundle_sha256": "78a2966f4ed70060a3a49470c305326c0dc2dac3d11d337e14ab680ae9f91bca", "expected": "VERIFIED: 33/33 checks. Signatures and recorded agreement only; not independence, not fault tolerance, not independent review.", "id": "cluster-fault-test-run2", "observed": [ "S1 commit with all 4: COMMITTED, 4 signers verified independently", "S2 one node crashed: COMMITTED with 3 signers (quorum 3 of 4)", "S3 crashed node restarted: reachable=True; converged within 121.4s = False; sequences {'cain-evid-node-1': 2, 'cain-evid-node-2': 2, 'cain-evid-node-3': 2, 'cain-evid-node-4': 1}", "S4 two nodes crashed (beyond f=1): status=CONSENSUS_TIMEOUT, committed=False, primary sequence advanced without a commit=True", "S5 both restarted: converged before next commit=False (sequences {'cain-evid-node-1': 3, 'cain-evid-node-2': 2, 'cain-evid-node-3': 2, 'cain-evid-node-4': 1}); next commit COMMITTED with 4 signers; converged after it=True (sequences {'cain-evid-node-1': 4, 'cain-evid-node-2': 4, 'cain-evid-node-3': 4, 'cain-evid-node-4': 4})" ], "verify": "curl -O https://cainstudio.online/proof/bundle/cluster-fault-test-2026-09-21-run2/bundle.json && curl -o verify_cluster_evidence.py https://cainstudio.online/proof/bundle/cluster-fault-test-2026-09-21-run2/verify_cluster_evidence.py.txt && python3 verify_cluster_evidence.py bundle.json", "what": "PBFT n=4,f=1 twin cluster: commit with 4, with 3 after a crash, no commit with 2 crashed, restart behaviour" }, { "bundle_root": "3bffe4a481e22d502600beec8b8b7a36ae96986383003389a2d1bd831e1232a2", "id": "live-multi-host-cluster-public-probe", "note": "a verdict of NOT_ESTABLISHED for the deployed cluster is a real, current finding; it is independent of the twin-cluster fault test above, which exercises the same image on one host", "site_verdicts": { "cainstudio.online": "NOT_ESTABLISHED", "clawx.click": "NOT_ESTABLISHED", "mcpgate.online": "NOT_ESTABLISHED" }, "verify": "curl -sO https://cainstudio.online/proof/bundle/byzantine-cluster-2026-09-21/verify_cluster_bundle.py.txt && mv verify_cluster_bundle.py.txt verify_cluster_bundle.py && python3 verify_cluster_bundle.py https://cainstudio.online/proof/bundle/byzantine-cluster-2026-09-21/ --live", "what": "read-only probe of the deployed multi-host cluster through the public sites, with computed verdicts (published by a separate run of this work; bundle_root and verdicts are read from its own manifest)" }, { "id": "live-cluster-read-only", "runs_on": "the host only", "verify": "python3 verify_cluster_evidence.py --node http://127.0.0.1:18421 --node http://127.0.0.1:18422 --node http://127.0.0.1:18423 --node http://127.0.0.1:18424", "what": "signed state proofs of the four live test-cluster nodes (ports 18421-18424 on the host; not publicly exposed)" }, { "audit": { "cainstudio.online": "https://cainstudio.online/proof/bundle/cluster-fault-test-2026-09-21-run2/legacy-cluster-claim-audit.json", "clawx.click": "https://clawx.click/evidence/cluster-fault-test-2026-09-21-run2/legacy-cluster-claim-audit.json", "mcpgate.online": "https://mcpgate.online/proof/bundle/cluster-fault-test-2026-09-21-run2/legacy-cluster-claim-audit.json" }, "id": "legacy-cluster-claim-audit", "problems": [ "reachable nodes report a quorum below the 3 the file claims (2 of 4 is not Byzantine tolerant)", "not every listed node exposes a PBFT engine endpoint", "none of the claimed invariants carries any attached evidence" ], "verdict": "CLAIMS_NOT_SUPPORTED_BY_LIVE_OBSERVATION", "what": "audit of the older public file cain_cluster_4node_bft_evidence.json against what its endpoints report" }, { "bundle": { "cainstudio.online": "https://cainstudio.online/proof/bundle/bft-multiprocess-2026-09-21/REPRODUCE.txt", "clawx.click": "https://clawx.click/evidence/bft-multiprocess-2026-09-21/REPRODUCE.txt", "mcpgate.online": "https://mcpgate.online/proof/bundle/bft-multiprocess-2026-09-21/REPRODUCE.txt" }, "does_not_prove": "independent failure domains, partitions, view change; ran the CAIN 23.0 test node service, not the production PBFT engine", "expected": "\"overall\": \"ALL_VERIFIED_WITH_LIMITATIONS\"", "id": "bft-multiprocess-runs", "verify": "see REPRODUCE.txt: python3 verify_bft_evidence.py runs", "what": "7 multi-process 4-node runs (honest, wrong commitment, equivocation, forged votes, crash 1, crash 2, pre-fix crash) with raw signed messages; equivocation and deviation are derived as cryptographic proofs" } ], "schema": "cain42.ai_verify_entrypoint.v1", "status": "PRE-PRODUCTION" }