CAIN42-AGENT-PROOF-PACKAGE (Evolution 6), 2026-09-24. SIMULATED (in-process), self-attested.

300 scripted agent trajectories ran against 4 real CAIN-42 PBFT engines and the real MCPGate
interceptor with the agentic gate. The attacks covered: plan mutation after consensus, undeclared
action, tool swap, impersonation, replay, forged trajectory, and delegation escalation. Every one was
blocked with its reason code, and every allowed action carries a complete proof chain. The package
holds 40 sample chains with identities signed by the pinned identity authority, agent-signed
trajectories (payloads private; only digests are chained), consensus authorizations, gate proofs
and execution proofs. The full 1,000-trajectory run is summarized in the certification.

  BASE=https://cainstudio.online/proof/bundle/cain42-agent-proof-package-2026-09-24    # or mcpgate.online/proof/bundle/cain42-agent-proof-package-2026-09-24, clawx.click/evidence/cain42-agent-proof-package-2026-09-24
  mkdir -p pkg/verifiers && cd pkg
  curl -so manifest.json "$BASE/manifest.json"; curl -so agents.json "$BASE/agents.json"
  for v in cain_proof_verify verify_pbft_qc_bundle verify_dag_bundle; do curl -so verifiers/$v.py "$BASE/verifiers/$v.py.txt"; done
  python3 verifiers/cain_proof_verify.py .        # expect MANIFEST VERIFIED, AGENTS VERIFIED, FINAL RESULT: VERIFIED

Not claimed: LLM agents (the agents are scripted), hardware attestation (SIMULATED), independent
failure domains, that the live MCPGate runs this gate, a 72-hour soak, third-party review.