{
  "assurance": {
    "assured": true,
    "files": 292,
    "secret_scan_high": 0,
    "tree_reproducible": true,
    "tree_sha256": "c5109fd68f59b1540ba2f15ed146f19ae0a2116db5e0d08ba15d178af818f29c"
  },
  "claims_digest": "7cd89cbf2c63201fc6fec6518524534c06063c7b81c63f266299bb8bb0fd5487",
  "claims_registry": "claims/CANONICAL-CLAIMS.json",
  "commercial_components": [
    "hosted_control_plane",
    "managed_pbft",
    "assurance_products",
    "keystone_actor",
    "evidence_and_artifacts",
    "private_config"
  ],
  "deployment": "deploy/opensource/README.md",
  "generated_at": "2026-11-12T05:31:46Z",
  "hugging_face_space": {
    "checked_at": "2026-11-12",
    "note": "static Space; long-lived consensus is not run inside it",
    "reachable": true,
    "runtime": "static",
    "url": "https://huggingface.co/spaces/vicentenoriega/CAIN-42"
  },
  "independence": "docs/opensource/FAILURE-DOMAIN-INDEPENDENCE.md",
  "license": "Apache-2.0",
  "open_components": [
    {
      "component": "mcpgate_enforcement_core",
      "digest": "6ed780fa477cfc5a86f837ded1c670648ab6f81f31c472149bc52111f234a036",
      "files": 3,
      "purpose": "MCPGate enforcement boundary and single-use capability primitive",
      "status": "IMPLEMENTED_TESTED"
    },
    {
      "component": "hosted_capability_gate",
      "digest": "808f3c01ca984031c9a750decea1cf5425153ccbd797c43e00edfc1a38f8abb4",
      "files": 1,
      "purpose": "Hosted MCP single-use capability gate (restriction-only)",
      "status": "IMPLEMENTED_TESTED_NOT_DEPLOYED"
    },
    {
      "component": "hardware_trust_e1",
      "digest": "29eba99dc4fa8bcb15a5ef5d05b696660bb7eecc703ac1dcc98379c151dd9ac2",
      "files": 6,
      "purpose": "TPM 2.0 quote parsing/verification, reference-value policy, attestation authority",
      "status": "IMPLEMENTED_TESTED_HARDWARE_GATES_BLOCKED"
    },
    {
      "component": "federated_network",
      "digest": "f4302b3cd52ecf24c477be4bf5ef4679c98f6b1ee6e26097c387d6a038e0277e",
      "files": 11,
      "purpose": "Cross-organization grants, pinned trust, signed registry, portable evidence envelopes",
      "status": "IMPLEMENTED_TESTED_LOCAL_NODES"
    },
    {
      "component": "global_control_plane",
      "digest": "37fc5bb3cea5a4ea2799e823ef75adb35f4e14b7f246405303b4bd94982d42e9",
      "files": 2,
      "purpose": "Multi-tenant registry, fleets, policy hierarchy, delegation, revocation",
      "status": "IMPLEMENTED_TESTED_LOCAL"
    },
    {
      "component": "open_ecosystem",
      "digest": "84bc072d5716424e0519ed1469efd3e3f63b0231e2675631276f75ff34230a65",
      "files": 3,
      "purpose": "Reference catalog, conformance runner, honest metrics",
      "status": "IMPLEMENTED_TESTED_LOCAL"
    },
    {
      "component": "independent_evidence",
      "digest": "84741e887ccd98610f4fc3ec01226266601b3e89f364da589af521712e804467",
      "files": 10,
      "purpose": "Merkle log, signed checkpoints, witnesses, disputes, offline auditor CLI",
      "status": "IMPLEMENTED_TESTED_LOCAL_WITNESSES"
    },
    {
      "component": "universal_governance",
      "digest": "76a2c9ed6536ab0f9ba2d5049091bbf2719758795a7376f56ab9d49533edff5f",
      "files": 7,
      "purpose": "Framework-neutral governance protocol, six adapters, approvals, conformance",
      "status": "IMPLEMENTED_TESTED_CONTRACT_ONLY"
    },
    {
      "component": "e50_adversarial_assurance",
      "digest": "e8d49405efd86e9de44449127fcddaeafaf70a93af5e3010c702548ec549fb9c",
      "files": 6,
      "purpose": "Consequence-based adversarial lab: independent oracle, 10 attack strategies, multi-turn, mutation testing",
      "status": "IMPLEMENTED_TESTED_LAB"
    },
    {
      "component": "consequence_lab",
      "digest": "eba99393b2fb68934746579338aa25b9c8089e74168bd4928fd5b57a2fca8d52",
      "files": 1,
      "purpose": "Adversarial evaluation measuring forbidden side effects, not detector verdicts",
      "status": "IMPLEMENTED_TESTED_LAB"
    },
    {
      "component": "agent_adapters",
      "digest": "58d1d3e1476b4f8ef9ee6325c2a5dcf8c2d50b87f1cfe2e752cdfc33a16a209c",
      "files": 6,
      "purpose": "LangChain/CrewAI/LlamaIndex/A2A/browser agent integration adapters",
      "status": "IMPLEMENTED_TESTED_PARTIAL"
    },
    {
      "component": "pbft_dev_implementation",
      "digest": "62cc3992c8bca57bd20ca967eacfaccaf864bfeceac61d52c2a0a67977097ed3",
      "files": 12,
      "purpose": "PBFT engine used by the reproduction drill (full engine, not a toy)",
      "status": "IMPLEMENTED_TESTED_LOCAL_ONLY"
    },
    {
      "component": "offline_evidence_verifiers",
      "digest": "c466b57640c501fa10131504645baf3a0a1bbea4712a4594b4a1bcbe4cc66fe5",
      "files": 2,
      "purpose": "Verifiers that import no CAIN runtime code",
      "status": "IMPLEMENTED_TESTED"
    },
    {
      "component": "sdk_python",
      "digest": "cbbb658288f748dfed27f1cbabed61d34f431f28b33d8b32958216faa8298e87",
      "files": 70,
      "purpose": "Python SDK for guarded actions",
      "status": "IMPLEMENTED_TESTED"
    },
    {
      "component": "canonical_signing",
      "digest": "c4a47cd4a7cada187ea7eee28741d956486929232491af17030573b586855713",
      "files": 128,
      "purpose": "Canonical JSON + domain-separated Ed25519 signing used by evidence objects",
      "status": "IMPLEMENTED_TESTED"
    },
    {
      "component": "sdk_typescript",
      "digest": "e96d7de7bb528964495e43500a1e1af194d4c697ad2a9e6ffa101ccc5853a174",
      "files": 3,
      "purpose": "TypeScript verification helpers",
      "status": "IMPLEMENTED_BUILT"
    },
    {
      "component": "deployment_templates",
      "digest": "292461057ef113c337e86eadb2461c4a8098772da6ab02c78e1b9af54461be27",
      "files": 3,
      "purpose": "Reproducible local four-node development network",
      "status": "TEMPLATE_LOCAL_ONLY"
    },
    {
      "component": "schemas_and_examples",
      "digest": "10125e9f0717df40140cb050f8b709ec75a2bb5a8cb80ba93748fedb21b63085",
      "files": 10,
      "purpose": "Machine-readable schemas and runnable examples",
      "status": "PARTIAL"
    },
    {
      "component": "open_source_docs",
      "digest": "5a0bb500b3f18b8702be1bae9f0ab70b460139d1a395c182e563f856aaaae886",
      "files": 9,
      "purpose": "Licensing, governance, architecture, limitations, reproduction instructions",
      "status": "DOCUMENTATION"
    }
  ],
  "product_identity": "CAIN-42",
  "publication_blockers": [],
  "publication_note": "Published 2026-11-12 as a deterministic source archive + git bundle, mirrored on the Hugging Face Space. There is no public GitHub repository.",
  "quickstart": "opensource/QUICKSTART.md",
  "registry_digest": "49889ac04b9644f141436cf9ce915b267d9c3e92c375f6aea761abef9faebc51",
  "release_status": "PUBLISHED",
  "schema": "cain42.e49.release-registry.v1",
  "sites": {
    "cainstudio.online": {
      "open_core_available": true,
      "role": "hosted control plane and assurance services"
    },
    "clawx.click": {
      "open_core_available": true,
      "role": "agent identity, approval and evidence interface"
    },
    "mcpgate.online": {
      "open_core_available": true,
      "role": "self-hosted enforcement component"
    }
  },
  "source": {
    "do_not_link": true,
    "downloads": {
      "checksums": "https://cainstudio.online/open-source/downloads/SHA256SUMS",
      "git_bundle": "https://cainstudio.online/open-source/downloads/cain42-open-core-0.1.5.bundle",
      "hugging_face_mirror": "https://huggingface.co/spaces/vicentenoriega/CAIN-42/resolve/main/static/downloads/cain42-open-core-0.1.5.tar.gz",
      "tar_gz": "https://cainstudio.online/open-source/downloads/cain42-open-core-0.1.5.tar.gz",
      "zip": "https://cainstudio.online/open-source/downloads/cain42-open-core-0.1.5.zip"
    },
    "repository": null,
    "status": "PUBLISHED_AS_ARCHIVE_AND_BUNDLE"
  },
  "version": "0.1.5"
}