Skip to content

Proof Kit / Examples

Walkable examples that show Cassian Gate producing authoritative PASS and authoritative FAIL outcomes against real declared topologies. Each entry pairs a passing variant (the gate confirms the declared proof is satisfied) with a failing variant (the gate catches a real validation problem on the same bounded topology).

First-Run Proof

The official first-run adoption proof family. Failure-first path: run the failing variant first to see Cassian Gate catch a real validation problem, then run the passing variant to see the same proof succeed when the policy is correct.

Recipe — Can host A reach host B?

A bounded service-reachability check: host A reaches host B on a declared allowed TCP port. The next-step bridge after the first-run proof.

Recipe — Does this firewall block or allow a port?

Two bounded policy outcomes in one small example: TCP/8443 is allowed, TCP/2222 is blocked. The failing variant declares the wrong expectation for the actual policy.

A bounded deterministic failure-choreography example. A directly connected reachability topology with a deliberate interface bounce scenario, run only through the normal authoritative gate path.