CAIN-42 is open core
Enforcement, capability tokens, agent adapters, a four-replica PBFT drill and offline evidence verifiers are intended to be public under Apache-2.0. The hosted control plane, managed consensus and assurance products remain commercial.
Release status: prepared, not published.
There is no public source repository or downloadable release yet. This page does not link one, because
the previously advertised repository returned HTTP 404 on 2026-11-12. Everything below is runnable from a
local checkout of the project.
What is open
| Component | Status | What it does |
|---|---|---|
| MCPGate enforcement core | TESTED | Single-use capability tokens at the tool boundary |
| Hosted capability gate | TESTED · NOT DEPLOYED | Restriction-only gate for hosted MCP tool calls |
| Agent adapters | PARTIAL | LangChain, CrewAI, LlamaIndex, A2A, browser agents |
| PBFT engine + local drill | TESTED | N=4, f=1, Q=3; node loss, quorum loss, forged messages |
| TPM 2.0 verifier | BLOCKED ON HARDWARE | Quote/signature/PCR/event-log verification (simulator fixtures) |
| Offline evidence verifiers | TESTED | Verify records without importing CAIN runtime code |
Run it locally
python3 scripts/opensource/local_bft_drill.py pytest tests/test_evolution47_hosted_capability.py -q pytest tests/test_evolution48_hardware_trust.py -q
Four-node local network
python3 deploy/opensource/gen_dev_keys.py docker compose -f deploy/opensource/docker-compose.yml up --build
Four containers on one host are four processes, not four independent failure domains.
Verified this cycle
- 300/300 PBFT regression tests pass (250.9 s, local host).
- Local drill: 6/6 scenarios pass, 0 safety violations.
- Hosted capability gate: 21/21 tests; replay, revocation, policy/epoch binding enforced.
- E1 TPM verifier: 26/26 tests; hardware gates BLOCKED (no /dev/tpm*).
- Open-core tree: 244 files hashed, 0 imports into commercial code, 0 high-severity secrets.
What is not claimed
- No third-party audit, SOC 2 or certification.
- No multi-provider or multi-account independence: the live cluster is four Vultr regions under one account.
- No hardware attestation: no TPM is present on the build host.
- No production customer adoption is asserted by this page.
Links
- Hugging Face developer Space (reachable)
- cainstudio.online — hosted control plane
- mcpgate.online — self-hosted enforcement component
- clawx.click — agent identity and approval interface
Canonical machine-readable status: opensource/RELEASE-REGISTRY.json and
claims/CANONICAL-CLAIMS.json.