CAIN-42 E38: mission integrity decides live calls (2026-10-06)

Any call to the hosted decision pipeline may now declare an owner-signed mission and the goal chain OBJECTIVE → SUBGOAL → PLAN → ACTION that leads to it. The MISSION stage checks the signature, that every step attenuates its parent, and that the call stays inside the ACTION. Anything else is refused. Optimization cannot create authority.

Try it yourself, no account: POST /fabric/try?scenario=mission-inside (MISSION allows) and POST /fabric/try?scenario=mission-escalation (an agent asks to write inventory citing a 1,000,000 predicted reward and 99% confidence: BLOCKED by MISSION).

Snapshot taken on all three domains right after deploy: LIVE_SNAPSHOT.json · manifest.json. 16 of 16 E38 stage tests pass, including full-pipeline decisions; 153 decision-path regression tests pass.

Limits. Restriction-only, and active only when a call declares a mission. Demo missions are signed with a throwaway owner key. Same-project tests, not third-party. PRE-PRODUCTION.