{
  "audit_checks": {
    "cluster_id_matches_file": true,
    "endpoints_reachable": "4/4",
    "invariants_claimed": 8,
    "invariants_with_attached_evidence": 0,
    "nodes_exposing_pbft_status": [],
    "observed_cluster_ids": [
      "cluster-cain-001"
    ],
    "observed_quorum_meets_file_claim_of_3": false,
    "observed_quorum_per_node": {
      "node1": 2,
      "node2": 3,
      "node3": 2,
      "node4": 2
    }
  },
  "audit_file": "/proof/bundle/cluster-fault-test-2026-09-21-run2/legacy-cluster-claim-audit.json",
  "audit_problems": [
    "reachable nodes report a quorum below the 3 the file claims (2 of 4 is not Byzantine tolerant)",
    "not every listed node exposes a PBFT engine endpoint",
    "none of the claimed invariants carries any attached evidence"
  ],
  "audit_verdict": "CLAIMS_NOT_SUPPORTED_BY_LIVE_OBSERVATION",
  "bundle_id": "cain-cluster-4node-bft-v2",
  "bundle_type": "superseded_notice",
  "original_claims_unverified": {
    "bundle_id": "cain-cluster-4node-bft-v2",
    "bundle_type": "distributed_cluster_bft_evidence",
    "cain_version": "2.0.0-distributed",
    "cluster_id": "cluster-cain-001",
    "cluster_topology": {
      "byzantine_f1_readiness": "PROVEN",
      "byzantine_fault_tolerance_f": 1,
      "container_mesh": [
        {
          "container_port": 8420,
          "host_port": 18421,
          "name": "cain-cluster-node-1",
          "network": "cain-cluster-net"
        },
        {
          "container_port": 8420,
          "host_port": 18422,
          "name": "cain-cluster-node-2",
          "network": "cain-cluster-net"
        },
        {
          "container_port": 8420,
          "host_port": 18423,
          "name": "cain-cluster-node-3",
          "network": "cain-cluster-net"
        },
        {
          "container_port": 8420,
          "host_port": 18424,
          "name": "cain-cluster-node-4",
          "network": "cain-cluster-net"
        }
      ],
      "formula": "N >= 3f + 1 where f=1, Q = 2f + 1 = 3",
      "nodes": [
        {
          "attestation_verified": true,
          "endpoint": "http://149.28.193.50:19023",
          "node_id": "node1",
          "role": "bootstrap_validator",
          "state": "healthy",
          "trust_state": "trusted"
        },
        {
          "attestation_verified": true,
          "endpoint": "http://45.76.60.231:8420",
          "node_id": "node2",
          "role": "production_gateway_runtime",
          "state": "healthy",
          "trust_state": "trusted"
        },
        {
          "attestation_verified": true,
          "endpoint": "http://45.76.169.191:8420",
          "node_id": "node3",
          "role": "consensus_peer_validator",
          "state": "healthy",
          "trust_state": "trusted"
        },
        {
          "attestation_verified": true,
          "endpoint": "http://207.246.66.130:8420",
          "node_id": "node4",
          "role": "consensus_peer_validator",
          "state": "healthy",
          "trust_state": "trusted"
        }
      ],
      "quorum_threshold": 3,
      "total_nodes": 4
    },
    "consensus_and_security_invariants": {
      "invariants": [
        {
          "detail": "N=4 tolerates 1 arbitrary Byzantine or compromised node while reaching quorum (Q=3)",
          "id": "BFT-01",
          "name": "BYZANTINE_FAULT_TOLERANCE_PROVEN",
          "result": "PASS"
        },
        {
          "detail": "All cross-node messages enclosed in 7-stage signed NodeMessageEnvelope with replay rejection",
          "id": "BFT-02",
          "name": "AUTHENTICATED_GOSSIP_ENVELOPE",
          "result": "PASS"
        },
        {
          "detail": "Concurrent transitions converge to causal supremum without clock rollback or corruption",
          "id": "BFT-03",
          "name": "VECTOR_CLOCK_CONVERGENCE",
          "result": "PASS"
        },
        {
          "detail": "Partition recovery conflicts resolve with negative trust evidence strictly dominating",
          "id": "BFT-04",
          "name": "DETERMINISTIC_NEGATIVE_DOMINANCE",
          "result": "PASS"
        },
        {
          "detail": "Partitions dropping below quorum threshold (Q < 3) strictly refuse authoritative writes",
          "id": "BFT-05",
          "name": "SUB_QUORUM_FAIL_CLOSED",
          "result": "PASS"
        },
        {
          "detail": "Quarantined nodes enforce QUARANTINED -> PROBATION -> VERIFIED -> RESTORED state machine",
          "id": "BFT-06",
          "name": "PROBATION_RECOVERY_LIFECYCLE",
          "result": "PASS"
        },
        {
          "detail": "Microsecond TTL ActionCapabilityTokens verified at MCPGate boundary with single-use nonces",
          "id": "BFT-07",
          "name": "EPHEMERAL_ACTION_TOKEN_JIT",
          "result": "PASS"
        },
        {
          "detail": "Prometheus /metrics scrubs all private keys, shared secrets, and PII from metric labels",
          "id": "BFT-08",
          "name": "ZERO_SECRET_LEAKAGE_OBSERVABILITY",
          "result": "PASS"
        }
      ],
      "passing_count": 8,
      "status": "ALL_VERIFIED",
      "total_invariants_checked": 8
    },
    "live_verification_commands": {
      "cluster_attestation": "curl -s https://cainstudio.online/api/v1/cluster/attestation | jq .",
      "cluster_health": "curl -s https://cainstudio.online/api/v1/cluster/health | jq .",
      "cluster_metrics": "curl -s https://cainstudio.online/metrics | grep cain_cluster",
      "cluster_nodes": "curl -s https://cainstudio.online/api/v1/cluster/nodes | jq .",
      "cluster_status": "curl -s https://cainstudio.online/api/v1/cluster/status | jq .",
      "mcpgate_cluster_status": "curl -s https://mcpgate.online/api/v1/cluster/status | jq ."
    },
    "published_at": "2026-09-16T06:00:00Z",
    "status": "OPERATIONAL_AND_VERIFIED",
    "system": "CAIN Distributed Trust Fabric Multi-Node Cluster"
  },
  "original_file_sha256": "2322e4fa0d407be3fc508850bb49c90897f4a1694a7772cd12c45f4c08e15c35",
  "status": "SUPERSEDED_CLAIMS_NOT_SUPPORTED",
  "superseded_at": "2026-09-21T18:13:03Z",
  "what_is_verifiable_instead": {
    "cluster_fault_test": "/proof/bundle/cluster-fault-test-2026-09-21-run2/REPRODUCE.txt",
    "machine_readable_index": "/proof/bundle/AI_VERIFY.json",
    "scope": "a disposable 4-node PBFT twin cluster on one host, signatures and recorded agreement verified independently; not independent failure domains; PRE-PRODUCTION"
  },
  "why": "A read-only audit of the endpoints this file names found the file's claims unsupported or contradicted. The original claims are preserved below for history and must NOT be read as verified."
}