CAIN-42 PBFT quorum-certificate evidence: ops-drill-2026-09-26
==================================================================

What: Every quorum certificate held by each of the four replicas of cain-mr-01 after a load test, a rolling restart of all four replicas under continuous writes, and a total disk-loss recovery of one replica. The rebuilt replica's history is included.
Classification: MEASURED on the live multi-region cluster cain-mr-01 during operational drills
Generated: 2026-09-26T20:37:49Z
Source commitment: git 9fedb492717d4f7128d757afa68abcb94288fa15 (engine 33.4-production-hardened); source is not published.

Verify in about 30 seconds (Python 3.8+, `pip install cryptography`, no CAIN code):

  BASE=https://cainstudio.online/proof/bundle/ops-drill-2026-09-26/      # or https://mcpgate.online/proof/bundle/ops-drill-2026-09-26/
                                                             # or https://clawx.click/evidence/ops-drill-2026-09-26/
  curl -so verify_pbft_qc_bundle.py "$BASE/verify_pbft_qc_bundle.py.txt"
  curl -so PBFT_QC_BUNDLE.json "$BASE/PBFT_QC_BUNDLE.json"
  sha256sum PBFT_QC_BUNDLE.json verify_pbft_qc_bundle.py
    # expect 16ed16e2812f5736b2ac043b905251ad4f64e0b4599c06f6ea4ac37dee851bed  PBFT_QC_BUNDLE.json
    # expect ba452ce42528f11f7f5235727a65cae25a34072bc52b4711fd72581615d06009  verify_pbft_qc_bundle.py
  python3 verify_pbft_qc_bundle.py PBFT_QC_BUNDLE.json

Or open $BASE/index.html: your browser runs the same checks (WebCrypto Ed25519).

Read the verifier before trusting it: it is about 300 lines. It tampers with a certificate
in seven ways and requires every tampered copy to fail, so a verifier that accepts
everything would not pass.

Not claimed: independent operators or providers (one of each); physical key placement (operator-attested); hardware attestation; third-party review; absence of bugs.