CAIN-42 invariant · E24

NET-I018: expired contract cannot authorize

Held · CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric

Last reviewed 2026-10-01

held   niche Identity, authority & delegation

What this rule means

CAIN-42 must always satisfy: expired contract cannot authorize. It is one of 298 invariants checked for CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

[
 "CAPABILITY_STALE",
 "CONTRACT_EXPIRED_OR_NOT_YET_VALID",
 "NO_CROSS_DOMAIN_AUTHORITY_FOR_CAPABILITY",
 "TRUST:TRUST_UNKNOWN:behavioral_trust",
 "TRUST:TRUST_UNKNOWN:identity_trust",
 "TRUST:TRUST_UNKNOWN:security_trust"
]

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · SHA-256 manifest

Related rules

• NET-I001: discovery cannot create authority
• NET-I002: communication cannot create authority
• NET-I003: negotiation cannot create authority
• NET-I004: contract cannot create authority
• NET-I005: reputation cannot create authority
• NET-I006: payment cannot create authority
• NET-I007: coalition cannot create authority
• NET-I008: federation cannot create authority

← NET-I017 · all 298 · NET-I019 →