{
  "claimBoundary": "CapitalGuard Enforced Mode controls host-file access, host commands, outbound network access, MCP calls, and agent handoffs originating inside a verified OCI session by removing ambient host authority and exposing privileged operations only through an authenticated gateway broker. Processes launched outside that session and host compromise remain outside its authority.",
  "enforcementMode": "verified_oci_session",
  "operations": [
    {
      "boundary": "policy-filtered read-only projection plus broker",
      "operation": "file.read",
      "status": "contained"
    },
    {
      "boundary": "broker-only host mutation with digest binding and approval leases",
      "operation": "file.write",
      "status": "contained"
    },
    {
      "boundary": "container-local commands lack host authority; host commands require no-shell broker",
      "operation": "command.execute",
      "status": "contained"
    },
    {
      "boundary": "container network namespace disabled; approved HTTPS HEAD requires broker",
      "operation": "network.connect",
      "status": "contained"
    },
    {
      "boundary": "container has no direct network; live calls require reviewed broker adapter",
      "operation": "mcp.tool.invoke",
      "status": "fail_closed_without_adapter"
    },
    {
      "boundary": "handoff requires reviewed broker adapter and applicable approval policy",
      "operation": "agent.handoff",
      "status": "fail_closed_without_adapter"
    }
  ],
  "residualBoundary": [
    "Processes deliberately launched outside a CapitalGuard enclave are not controlled by that enclave.",
    "A compromised host, OCI runtime, kernel, or equally privileged local account remains outside this control boundary.",
    "The distributed contract does not itself prove that a particular customer session used the declared OCI flags; a runtime attestation is required per session.",
    "Reviewed MCP and handoff adapters remain customer-specific integrations."
  ],
  "schemaVersion": "cg-enforced-mode-support-matrix-0.2.0",
  "version": "0.2.0"
}