CAIN-42 · Apache-2.0 · open core

Download it. Run it. Verify it without trusting us.

CAIN-42 is a runtime trust fabric for autonomous AI: an agent proposes an action, CAIN decides, the boundary enforces, the system executes, and the decision becomes signed evidence. This release is the enforcement and verification core — not the hosted control plane.

Release 0.1.6 is published. Source archive, git bundle, SBOM, checksums and a signed release record are below. The archive contains no commercial code and no secrets; the build is reproducible from the recorded commit.

Download

Source (tar.gz)
cain42-open-core-0.1.6.tar.gz
deterministic archive

Source (zip)
cain42-open-core-0.1.6.zip
same tree

Git bundle
cain42-open-core-0.1.6.bundle
clone without GitHub

Checksums
SHA256SUMS
verify every byte

curl -LO https://cainstudio.online/open-source/downloads/cain42-open-core-0.1.6.tar.gz
curl -LO https://cainstudio.online/open-source/downloads/cain42-open-core-0.1.6.bundle
sha256sum -c SHA256SUMS
tar xzf cain42-open-core-0.1.6.tar.gz
cd cain42-open-core-0.1.6

python3 -m venv .venv && . .venv/bin/activate
pip install cryptography httpx pytest

python3 -m pytest tests -q                     # 58 passed, clean venv
python3 scripts/opensource/local_bft_drill.py  # 6/6 scenarios, 0 safety violations
python3 verify_release.py --pinned-pub PINNED_PUB.txt --archives ..
git clone cain42-open-core-0.1.6.bundle cain42

E50 adversarial assurance lab → — 33 in-scope attacks, 0 unauthorized side effects, mutation score 1.0 (11 non-equivalent mutants).

E51 universal agent governance → — one contract across 6 framework shapes, 78/78 cases.

E52 independent evidence network → — Merkle proofs, witnesses, equivocation detection, standalone auditor.

E53 multi-tenant control plane → and E54 open ecosystem →

E55 federated governance network → — cross-org grants, pinned trust, signed registry, portable evidence.

What is inside

Component	Status	What it does
MCPGate enforcement core	TESTED	single-use capability bound to principal, action, resource, request digest
Hosted capability gate	TESTED · NOT DEPLOYED	restriction-only gate for hosted MCP tool calls
Agent adapters	PARTIAL	LangChain, CrewAI, LlamaIndex, A2A, browser agents
PBFT engine + drill	TESTED LOCALLY	N=4, f=1, Q=3; node loss, quorum loss, forged messages
TPM 2.0 verifier	NO HARDWARE	quote/signature/PCR/event-log verification (simulator fixtures)
Offline verifiers	TESTED	verify records without importing CAIN runtime code

Published evidence

Release registry (component status, digest, blockers)
Canonical claims (11 claims, every evidence pointer in-repo)
Signed release record (Ed25519, self-signed — not a third-party audit)
Build provenance and SBOM

What is not claimed

No third-party audit, SOC 2 or certification.
No hardware attestation: no TPM was available on the build host.
No multi-provider independence: the live cluster is four Vultr regions under one account.
No production adoption implied by a download.

Other open-source tools

FALSEWORK, PROOFLOOP community, proofloop-verify and MCPGate Connect →