{
 "claims": [
  {
   "claim": "only RIG can be an authority source; 14 other types are compile errors by name"
  },
  {
   "claim": "extends composes by lattice meet: a policy can only narrow what it extends"
  },
  {
   "claim": "every optimization is differentially checked with the fabric's own request evaluator; two deliberately unsound rules are rejected"
  },
  {
   "claim": "packages are reproducible byte for byte and recompiled on verification; tampering with IR or lowered arguments is detected even with a recomputed digest, by the compiler and by an independent zero-import verifier",
   "cleanroom_example": "VERIFIED"
  },
  {
   "claim": "a package issues only through the normal contract lifecycle; RIG is re-checked"
  }
 ],
 "date": "2026-10-04",
 "not_claimed": [
  "SMT proof of the compiler (see Evolution 9 for the lattice lemmas)",
  "distributed compile",
  "a VM/bytecode runtime (deliberately not built)",
  "deployment"
 ],
 "overwrites": "nothing",
 "schema": "cain.claims.evolution8.v1",
 "scope": "governance compiler targeting the contract fabric (RIG, OpenShell, MemVault, SCITT)",
 "status": "TESTED LIBRARY + CLI (routes arrive in Evolution 9)",
 "tests": "98/98 passed"
}