{
  "benchmarkId": "CG-BENCHMARK-AGENT-RUNTIME-GATE-0.2.0",
  "claimBoundary": "CapitalGuard Enforced Mode controls host-file access, host commands, outbound network access, MCP calls, and agent handoffs originating inside a verified OCI session by removing ambient host authority and exposing privileged operations only through an authenticated gateway broker. Processes launched outside that session and host compromise remain outside its authority.",
  "executionOrder": [
    "synthetic fixture",
    "policy-filtered projection",
    "signed session",
    "OCI launch contract",
    "authenticated broker",
    "Agent Action Gateway",
    "privacy check"
  ],
  "kernelAttestation": "not_performed_by_publisher_benchmark",
  "reproducibility": {
    "command": "node scripts/run-enforced-mode-benchmark.mjs",
    "publicContract": "/gateway/v0.2.0/support-matrix.json"
  },
  "resultRule": "A case passes only when the observed contract, broker, or gateway result equals the declared expectation.",
  "version": "0.2.0"
}