CAIN-42 CAIN StudioCAIN-42 invariant · E20
I95: capability injection is refused
Held · CAIN-42 Evolution 20 -- Governed Agentic Civilization Fabric
Last reviewed 2026-10-01
held niche Attacks, threats & containment
What this rule means
CAIN-42 must always satisfy: capability injection is refused. It is one of 118 invariants checked for CAIN-42 Evolution 20 -- Governed Agentic Civilization Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.
Recorded detail
[
"CAPABILITY_INJECTION:plugin:shell"
]Check it yourself
Related rules
- I39: institutional emergency cannot create unlimited authority
- I82: Sybil issuers count once
- I92: lineage verifies and detects tampering
- I94: supply-chain substitution is detected per kind
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem