{
  "schema_chirho": "cairn-website-capability-map-v1-chirho",
  "as_of_chirho": "2026-11-03",
  "name_chirho": "Cairn",
  "expansion_chirho": "Content-Addressed Immutable Reify Network",
  "architecture_url_chirho": "https://cairnrt.org/architecture-chirho.html",
  "release_scope_chirho": "Static website capability map with separately published source snapshots; not a production-readiness or current-host-health verdict.",
  "source_release_chirho": {
    "published_on_chirho": "2026-11-03",
    "runtime_url_chirho": "https://github.com/loveJesus/cairn-opensource-chirho",
    "runtime_commit_chirho": "088c777fc7fadd1bf36f6cebd8e52de2d6d75126",
    "product_url_chirho": "https://github.com/loveJesus/perffection-opensource-chirho",
    "product_commit_chirho": "3b33ac599967a9eaaf0abf55376cd2bc1d043327",
    "branch_chirho": "main_chirho",
    "anonymous_access_verified_chirho": true,
    "terms_chirho": "Existing AGPL-3.0-only, documented MIT exceptions and third-party notices; read the source license files."
  },
  "capabilities_chirho": [
    {
      "name_chirho": "Executed private-contact walkthrough",
      "status_chirho": "locally-exercised-chirho",
      "scope_chirho": "November 3, 2026 public 088c777f CLI with same-source SDK guests and fresh synthetic store. Submit 200, one safe row/effect, unauthorized owner request 401, authorized reveal 200; five safe surfaces checked and no privacy-scan findings.",
      "limit_chirho": "Served query refused 400 without its required ledger source; operator direct read is distinct. Not distribution, PostgreSQL compensation, external delivery or a production customer workflow. Hero film is an explanatory reconstruction, not a recording.",
      "evidence_url_chirho": "https://cairnrt.org/runtime-evidence-chirho.json"
    },
    {
      "name_chirho": "Policy-governed elasticity",
      "status_chirho": "implemented-mechanisms-chirho",
      "scope_chirho": "Capacity/headroom admission, measurement-freshness scaling posture, constrained placement and topology-policy checks with protected role floors.",
      "limit_chirho": "Not an always-running production autoscaler. Pure topology checks call no provider API and move no money; no infrastructure-billing or SLA claim."
    },
    {
      "name_chirho": "AI-authored application review",
      "status_chirho": "implemented-chirho",
      "scope_chirho": "Pure WASM guests, manifest-bound candidates, capability/cost review before authoritative promotion.",
      "limit_chirho": "Review is not a proof of arbitrary application correctness."
    },
    {
      "name_chirho": "Governed effects and databases",
      "status_chirho": "implemented-chirho",
      "scope_chirho": "Runtime-owned blessed effects, versioned reads/writes, query projections and an explicitly injected PostgreSQL adapter.",
      "limit_chirho": "No ambient database or network authority for pure guests; no universal deployment claim."
    },
    {
      "name_chirho": "Private-data flows",
      "status_chirho": "implemented-and-locally-exercised-chirho",
      "scope_chirho": "Sealed references, subject binding, governed reveal, access evidence and erasure controls.",
      "limit_chirho": "Pure outputs are not automatically declassified; no regulatory certification."
    },
    {
      "name_chirho": "Compute budgets and caching",
      "status_chirho": "implemented-chirho",
      "scope_chirho": "Wasmtime instruction fuel, epoch yields and content-bound pure-result caching.",
      "limit_chirho": "Not an external-I/O wall-clock bound or permission to repeat a write."
    },
    {
      "name_chirho": "Phi and dependency gating",
      "status_chirho": "implemented-with-abi-limit-chirho",
      "scope_chirho": "Phi waits for every declared input and requires exactly one non-skipped value.",
      "limit_chirho": "Ordinary served guest execution has no general arbitrary multi-input ABI; the browser planner is its own simulation host."
    },
    {
      "name_chirho": "Rewind and forward compensation",
      "status_chirho": "implemented-chirho",
      "scope_chirho": "Versioned state and references, retained provenance, scoped recorded-result replay and explicit compensations. Released PostgreSQL compensation derives a new signed intent with current authority, current price and original-effect binding.",
      "limit_chirho": "No erasure of external actions, universal exactly-once guarantee, automatic compensation for every effect or claim that all recovery uses instruction fuel."
    },
    {
      "name_chirho": "Cross-provider elections",
      "status_chirho": "host-exercised-chirho",
      "scope_chirho": "July 25, 2026: election-only failover from France to Germany across providers and architectures.",
      "limit_chirho": "No ledger, money or effect on that drill; not a current-health or whole-region-loss claim."
    },
    {
      "name_chirho": "Cross-geography forwarding",
      "status_chirho": "host-exercised-chirho",
      "scope_chirho": "July 30, 2026: synthetic request, elected-owner execution, one owner ACK and automatic verified eventual readback.",
      "limit_chirho": "Not multi-node durable-before-ACK or authoritative-history healing."
    },
    {
      "name_chirho": "Auditable redundant and remote computation",
      "status_chirho": "design-research-chirho",
      "scope_chirho": "Research pattern: approved recorded observations feed redundant computation or independent checking; code/input/execution identities, separate effect authority and actual outcome evidence form an auditable chain. Remote evidence exchange is a separate use case.",
      "limit_chirho": "Not a released voter, arbitrary distributed replay mode, universal cross-engine determinism, proof of sensor truth, flight qualification, hard real-time, radiation tolerance or spacecraft deployment.",
      "observation_policy_chirho": "Preserve origin, privacy, residency and access policy. A mirrored observation is not a new measurement. Synthetic mocks remain labelled synthetic. Replicas must not independently repeat real-world effects."
    },
    {
      "name_chirho": "Browser computation lab",
      "status_chirho": "website-demonstration-chirho",
      "scope_chirho": "Actual zero-import Rust WASM; BLAKE3 identities; bounded cache; counter and probe simulation; inspection rewind and forward compensation.",
      "limit_chirho": "Tab-memory database and network simulation, demo work-unit fuel, no production engine, real telemetry or signed runtime audit."
    }
  ]
}