{
  "generated_at": "2026-11-12T06:17:38Z",
  "packages": [
    {
      "capabilities": [
        "attack_corpus",
        "mutation_testing",
        "side_effect_oracle"
      ],
      "category": "testing",
      "deprecated": false,
      "description": "Independent oracle, 10 attack strategies, multi-turn, mutation testing.",
      "id": "cain42-adversarial-lab",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Consequence-based adversarial lab",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "cain/assurance/e50",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "tool_interception",
        "session_binding",
        "approval",
        "evidence_capture"
      ],
      "category": "adapters",
      "deprecated": false,
      "description": "OpenClaw, LangGraph, CrewAI, AutoGen, OpenAI and Anthropic tool-call shapes.",
      "id": "cain42-framework-adapters",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Framework adapters",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "cain/governance/adapters.py",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": false
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "capability_validation",
        "replay_protection",
        "revocation",
        "policy_binding"
      ],
      "category": "enforcement",
      "deprecated": false,
      "description": "Pinned-issuer, request-bound, single-use capability stage for hosted MCP.",
      "id": "cain42-hosted-capability",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Hosted capability gate",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "cain/continuum/hosted_capability.py",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "transparency_log",
        "witnesses",
        "disputes"
      ],
      "category": "verification",
      "deprecated": false,
      "description": "Signed tree heads, witness receipts, equivocation detection, disputes.",
      "id": "cain42-evidence-network",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Independent evidence network",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "cain/evidence",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "local_consensus",
        "fault_injection"
      ],
      "category": "deployment",
      "deprecated": false,
      "description": "Reproducible local PBFT network (one host, explicitly not multi-provider).",
      "id": "cain42-local-network",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Local four-node network",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "deploy/opensource",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_1",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "tool_interception",
        "capability_validation",
        "default_deny",
        "revocation"
      ],
      "category": "enforcement",
      "deprecated": false,
      "description": "Single-use capability verification, default-deny and replay protection at the tool boundary.",
      "id": "cain42-mcpgate",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "MCPGate enforcement boundary",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "cain/mcp_proxy.py",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "tenant_isolation",
        "fleets",
        "delegation",
        "revocation",
        "audit"
      ],
      "category": "control-plane",
      "deprecated": false,
      "description": "Org/fleet registry, hierarchical policy, delegation, approvals, revocation.",
      "id": "cain42-control-plane",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Multi-tenant control plane",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "cain/controlplane",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "inclusion_proof",
        "consistency_proof",
        "witness_receipts",
        "revocation"
      ],
      "category": "verification",
      "deprecated": false,
      "description": "Standalone Merkle/signature/witness verification with no CAIN imports.",
      "id": "cain42-offline-verifier",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Offline evidence verifier",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "auditor-kit/cain_evidence_verify.py",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "client",
        "guarded_action"
      ],
      "category": "sdk",
      "deprecated": false,
      "description": "Client SDK for guarded actions (hosted and local).",
      "id": "cain42-python-sdk",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Python SDK",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "sdk/python",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_1",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    },
    {
      "capabilities": [
        "identity",
        "authorization_contract",
        "evidence_contract"
      ],
      "category": "protocol",
      "deprecated": false,
      "description": "cain.governance.v1 request/decision/result schemas with strict validation.",
      "id": "cain42-governance-protocol",
      "license": "Apache-2.0",
      "maintenance": "maintained",
      "name": "Universal governance protocol",
      "protocol_versions": [
        "cain.governance.v1",
        "cain42.hosted-mcp.capability.v1",
        "cain52.evidence-bundle.v1",
        "cain42.open-core.release.v1"
      ],
      "publisher": "firme-ai",
      "repository_path": "cain/governance/protocol.py",
      "security_declarations": {
        "default_deny": true,
        "evidence": "tests/test_evolution*.py public in the release archive",
        "grants_authority_alone": false,
        "live_framework_tested": null
      },
      "verification": "LEVEL_2",
      "version": {
        "artifact": "dist/cain42-open-core-0.1.6.tar.gz",
        "bytes": 2269875,
        "sha256": "28d3557d0702540230d4496da27bfc65af10af25690fbb48fe7f9af2a1ba3fdf",
        "version": "0.1.6"
      }
    }
  ],
  "publishers": [
    {
      "id": "firme-ai",
      "kind": "reference_maintainer",
      "name": "FIRME AI CORPORATION",
      "note": "project-maintained; no third-party listings"
    }
  ],
  "schema": "cain42.e54.catalog.v1"
}