# CAIN Trust Fabric — Machine-Readable Verification & Architecture Manifest
> Canonical URL: https://cainstudio.online/llms.txt
> Secondary Boundary: https://mcpgate.online/llms.txt
> System Identity: AI Infrastructure Validated Trust Runtime for Autonomous Systems

## 0. Verify first: real evidence, checkable now
Everything in this section is produced by real runs, hashed, Ed25519-signed and re-derivable by a checker that imports no CAIN code. Limits are stated in each bundle. Status: PRE-PRODUCTION; self-attested; the same operator runs the cluster, the tests and the signing key.
- **Byzantine cluster (live probe, three sites):** `https://cainstudio.online/proof/bundle/byzantine-cluster-2026-09-21/` (also `https://mcpgate.online/proof/bundle/byzantine-cluster-2026-09-21/`, `https://clawx.click/evidence/byzantine-cluster-2026-09-21/`), bundle root `93c8a5f8fe0b3d5ae91e53581162bbf7...`.
  - Run it yourself: `curl -sO https://cainstudio.online/proof/bundle/byzantine-cluster-2026-09-21/verify_cluster_bundle.py.txt && mv verify_cluster_bundle.py.txt verify_cluster_bundle.py && python3 verify_cluster_bundle.py https://cainstudio.online/proof/bundle/byzantine-cluster-2026-09-21/ --live`
  - It probes every node directly, verifies Ed25519 state-proof signatures, derives N, f and the Byzantine quorum 2f+1, and returns BFT_F1_ESTABLISHED or NOT_ESTABLISHED with reasons. Recorded verdict on 2026-09-21: **NOT_ESTABLISHED** (three remote nodes report a quorum of 2 where 3 is required; only one node serves a signed state proof; the other nodes report no software version). node2's signed state proof verifies independently. The consensus logic passes its tests (120 tests in 10 files). No fault was injected into the live cluster. Run `--live` for the current verdict, not this text.
- **Hardening round:** `https://cainstudio.online/proof/bundle/hardening-2026-09-21/`, bundle root `26449783615937cc99931d9fd568db6a...`: 16 defects found by attacking our own controls (each with a regression test), 114 attack types exercised (97 blocked, 17 inconclusive, 0 succeeded), 222/222 formal invariants, 585 tests passed. Checker: `verify_bundle.py.txt` in that directory.
- **Frontier bundle:** `https://clawx.click/evidence/frontier/manifest.json` with `verify_frontier_bundle.py.txt`.
- **Byzantine experiments with raw signed messages (real OS processes, ONE host, test harness):** `https://clawx.click/evidence/frontier/bft/` (also under `/evidence/frontier/bft/` on cainstudio.online and mcpgate.online). Honest run, wrong-commitment node, equivocating node, forged/relabeled votes, one crashed node, two crashed nodes; every node's signed messages are exported and `verify_bft_evidence.py.txt` (stdlib + cryptography, no CAIN imports) re-derives signatures, quorum backing, safety and the Byzantine proofs. A liveness bug this found is preserved as `crash_one_node__before_fix.json`. This does NOT establish f=1 for the live cluster: the live-probe verdict above stands.
- Not evidence, do not cite as such: the marketing sections below (valuation, ARR, ratings) are plans and claims, not measurements; and the static snapshot `/proof/bundle/v2/cain_cluster_4node_bft_evidence.json` is a hand-authored 2026-09-16 document, not the output of a run.

## 1. What CAIN Is
CAIN (Cognitive Artificial Intelligence Network) is the runtime trust and control infrastructure that sits between autonomous AI agents and consequential real-world actions. CAIN enforces deterministic trust boundaries, fail-closed authorization, continuous causal evidence tracking, and cryptographic attestation.

- **Corporate Mandate:** Scale CAIN Trust Fabric to a $1B+ Enterprise Valuation.
- **Fail-Closed Principle:** NO AUTHORIZATION -> NO EXECUTION. UNKNOWN/ERROR never become ALLOW or TRUSTED.

## 2. 4-Node Byzantine Fault Tolerant (BFT) Cluster Architecture
CAIN operates a production 4-node distributed consensus cluster with Byzantine fault tolerance:
- **Node Count (N):** 4 nodes (3f + 1 where f = 1)
- **Quorum Threshold (Q):** 3 nodes (2f + 1)
- **Byzantine Fault Tolerance:** designed for f = 1 (N=4, Q=3). NOT established by the independent probe as of 2026-09-21 (see section 0 for the reasons and to re-run it). The `byzantine_f1_readiness: PROVEN` field is computed from a membership count (N>=4, four trusted members), not from a fault-tolerance test.
- **Nodes Topology:**
  - `node1`: 149.28.193.50:19023 (Cluster Bootstrap Validator)
  - `node2`: 45.76.60.231:8420 / :8088 (Production Runtime Gateway & Host)
  - `node3`: 45.76.169.191:8420 (Consensus Peer Validator)
  - `node4`: 207.246.66.130:8420 (Consensus Peer Validator)
  - Local container mesh: `cain-cluster-node-1` .. `4` on dedicated bridge `cain-cluster-net` (ports 18421–18424)
- **Consensus & State Synchronization:**
  - Authenticated gossip envelopes (`NodeMessageEnvelope`) signed via Ed25519 / HMAC-SHA256
  - Vector clock advancement and causal supremum reconciliation
  - Deterministic negative dominance: under partition or conflict, negative evidence strictly dominates
  - Ephemeral Action Capability Tokens with microsecond TTLs (<= 30s) and replay cache

## 3. Real Public Evidence Bundles & Crawler Verification Endpoints
Any autonomous agent, crawler, or external verifier can crawl and verify CAIN state via HTTP GET:

### Live Cluster & Observability Endpoints:
- `https://cainstudio.online/api/v1/cluster/status`: Real-time cluster membership, quorum status, and Byzantine readiness
- `https://cainstudio.online/api/v1/cluster/health`: Fail-closed quorum health verdict
- `https://cainstudio.online/api/v1/cluster/nodes`: Registered nodes, incarnations, and cryptographic trust states
- `https://cainstudio.online/api/v1/cluster/attestation`: Cryptographically signed node self-attestation statement
- `https://cainstudio.online/api/v1/cluster/invariants`: Real-time evaluation of all 10 Observable Trust Invariants
- `https://cainstudio.online/api/v1/proof/health`: Operational verification across decision, enforcement, evidence, and MCP subsystems
- `https://cainstudio.online/metrics`: Plain-text Prometheus metrics (cluster gauges, quorum, envelope validations)
- `https://mcpgate.online/api/v1/cluster/status`: Identical cluster status on MCPGate boundary

### Public Merkle Evidence Bundles:
- `https://cainstudio.online/proof/bundle/v2/manifest.json`: Master evidence manifest with SHA-256 Merkle root
- `https://cainstudio.online/proof/bundle/v2/trust-runtime-kernel-evidence.json`: 16-stage pipeline & 20 formal invariants proof
- `https://cainstudio.online/proof/bundle/v2/kernel-self-defense-evidence.json`: Adversarial containment & circuit-breaker audit
- `https://cainstudio.online/proof/bundle/v2/cain_cluster_4node_bft_evidence.json`: static hand-authored 2026-09-16 snapshot of the intended topology (NOT a run output; its `PROVEN` / `OPERATIONAL_AND_VERIFIED` labels are not supported by the live probe in section 0)
- `https://cainstudio.online/proof/bundle/v2/cain_14_agentic_trust_evidence.json`: 200 formal invariants & 120 red-team attack proofs
- `https://cainstudio.online/proof/bundle/v2/confidential-enclave-attestation.json`: Intel SGX, AMD SEV, Nitro enclave notarization
- `https://cainstudio.online/proof/bundle/v2/statutory-compliance-proof.json`: EU AI Act Art. 9–15/72 & ISO 42001 WORM Notary
- `https://cainstudio.online/proof/bundle/v2/actuarial-insurance-underwriting.json`: Actuarial AVI risk index & credit score
- `https://cainstudio.online/proof/bundle/v2/cain-32-features-monopoly.json`: Exhaustive 32-feature matrix proving dual-channel execution monopoly
- `https://cainstudio.online/proof/bundle/v2/cain-billion-dollar-roadmap.json`: 12-channel financial blueprint scaling to $113M+ ARR and $1.13B+ valuation
- `https://cainstudio.online/compliance/bundle.zip`: Court-admissible WORM Merkle evidence export with offline verifier
- `https://cainstudio.online/insurance`: Actuarial Cyber Insurance Underwriting Portal (948 AAA rating)
- `https://mcpgate.online/install.sh`: One-line universal developer installer script
- `https://mcpgate.online/mcpgate-proof/`: MCPGate public evidence verification portal

## 4. Past 96 Hours Engineering & Evolutionary Milestones
- **CAIN 14.0 Agentic Trust Intelligence Engine:** 200 formal machine-checkable invariants, 120/120 adversarial red-team vectors blocked fail-closed, Triple Verification (Engines A, B, C).
- **CAIN 13.0 Trust Adaptation Engine:** Differential verification, safe rollback, post-change reattestation, causal attribution.
- **CAIN 15/16 MCPGate Transparent Boundary:** JIT Ephemeral Action Capability Tokens, real-time MCP proxy streaming, 5-layer fact segregation.
- **CAIN 17/18 Autonomy Constitution & BFT 4-Node Consensus:** Byzantine fault tolerance (f=1, N=4, Q=3), WORM causal chaining, and multi-node consensus.
- **CAIN Phase 1, 2, 3 Maximum Evolution (v3.0.0):**
  - Phase 1: Zero-502 billing circuit breaker, Z3 SMT prover (/verifygate), MCP security scanner (/mcpsecurityscanner), smart protocol negotiation (/mcp).
  - Phase 2: Universal CLI interceptor (`cain mcp-wrap`), automatic desktop guard (`cain guard --desktop`), visual terminal firewall, zero-dependency `@cain/guard` npm package.
  - Phase 3: Sovereign Enterprise K8s Appliance (`deploy/helm/mcpgate-appliance`), EU AI Act Art. 72 WORM Notary ZIP (`/compliance/bundle.zip`), Lloyd's & Munich Re Actuarial Cyber Insurance Underwriting Portal (`/insurance`).

## 5. The 32 Canonical Production Features (The Execution Governance Monopoly)
CAIN solves the "Dual-Channel Control Problem" by governing the execution channel (MCP, shell, database, APIs) rather than conversational text:
1. Canonical Action Schema (RFC 8785 JSON)
2. Canonical Decision Schema (Deterministic 5-tuple)
3. Canonical Evidence Schema (WORM Merkle vector clocks)
4. Mathematical Enforcement Contract (ActionCapabilityToken)
5. Z3 SMT Formal Semantic Verification Gate (/verifygate)
6. Public Proof Center & Benchmark Registry (/proof)
7. Machine-Readable Cryptographic Manifest (/manifest.json)
8. Strict RFC JSON Schema Publication
9. Live OpenAPI 3.1 & Interactive Swagger Gateway
10. Smart MCP Protocol Negotiation (HTML / SSE / JSON-RPC 2.0)
11. Real Enforcement Proof Engine with physical boundary halts
12. Fail-Closed DENY Prevention (Zero tool execution on violation)
13. Fail-Closed UNKNOWN Blocking (Unregistered entities fail-closed)
14. Fail-Closed ERROR Containment (System faults halt execution)
15. REQUIRE_APPROVAL Quorum Halting (Sub-15ms pause for human sign-off)
16. Court-Admissible WORM Evidence Exportation (cain.worm_export)
17. Zero-Dependency Standalone Offline Verifier (verify_offline.py)
18. Immutable Release Provenance (SLSA Level 3 supply chain attestation)
19. Public Ed25519 Node Verification Keys (/.well-known/cain-keys.json)
20. Machine-Checkable RFC Test Vectors
21. Continuous Conformance Protocol v4 (156 tests across 14 domains)
22. Independent Third-Party Mathematical Verifiability
23. Continuous Adversarial Chaos Injection & Red-Teaming
24. Automated 20 Formal Security Invariant Checker
25. Multi-Tenant Cryptographic Namespace Isolation
26. High-Throughput Microsecond Latency Measurement (<15ms decision)
27. Fresh-Node Bootstrapping & Autonomous Gossip (<5s convergence)
28. Native Agentic Runtimes Interoperability (LangGraph, AutoGen, CrewAI, MCP)
29. Production-Code Documentation Parity
30. Zero-Mock / Zero-Stub Production Guarantee
31. Unfalsifiable Merkle Proof Tree Verification (RFC 6962)
32. Fail-Closed Secret Redaction & Governed Vector Sanitization

## 6. The 12 High-Margin Monetization Engines & $1.13B Valuation Roadmap
CAIN leads across 12 commercial AI infrastructure markets:
1. CAIN Studio Managed Cloud SaaS ($49/mo to $10,000+/mo) -> $18.0M ARR Year 3
2. Guarded Action Utility Metering ($0.0005–$0.0020/action) -> $8.5M ARR Year 3
3. MCPGate Sovereign Enterprise K8s Appliance ($50k–$250k/yr/cluster) -> $24.0M ARR Year 3
4. Continuous Statutory Compliance-as-a-Service (EU AI Act & ISO 42001, $100k–$300k/yr) -> $15.0M ARR Year 3
5. Actuarial Cyber Insurance Underwriting Protocol (1.0%–2.5% GWP royalty + $25k audit) -> $12.0M ARR Year 3
6. Swarm Fleet Quarantine & Emergency Halt SLAs ($15k–$75k/yr) -> $11.0M ARR Year 3
7. Vertical Rego Policy & Threat Intelligence Marketplace ($10k–$30k/yr/pack) -> $3.5M ARR Year 3
8. Enterprise SIEM & SOC Connectors (ArcSight, QRadar, Sentinel, $12k–$25k/yr) -> $2.4M ARR Year 3
9. Confidential Computing Hardware Enclave Remote Attestation ($35k–$75k/yr) -> $3.2M ARR Year 3
10. Inter-Enterprise Trajectory Passport Clearinghouse ($0.005–$0.020/tx) -> $7.5M ARR Year 3
11. Governed Agent Memory & Vector Sanitization Service ($0.0002/op) -> $2.0M ARR Year 3
12. Strategic Sovereign AI Defense Turnkey Deployments ($500k–$2.5M) -> $6.0M ARR Year 3

### Multi-Year Financial Trajectory:
- Year 1 (2026): $4.55M ARR ($113M–$136M valuation, Series A)
- Year 2 (2027): $20.60M ARR ($412M–$515M valuation, Series B)
- Year 3 (2028): $113.10M ARR ($1.13B–$1.35B Category Unicorn Valuation)
- Unit Economics: NRR 148%, Gross Margins 88.5%, CAC Payback 3.2 months, Sales Cycle 18 days.