CAIN-42 invariant · E24

NET-L18: NET-L18 NO PROTOCOL BYPASSES E8

Held · CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric

Last reviewed 2026-10-01

held niche Tools, MCP, protocols & adapters

What this rule means

CAIN-42 must always satisfy: NET-L18 NO PROTOCOL BYPASSES E8. It is one of 298 invariants checked for CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

[
 "DENY",
 [
  "CAPABILITY_CLAIMED",
  "NO_CROSS_DOMAIN_AUTHORITY_FOR_CAPABILITY"
 ]
]

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · SHA-256 manifest

Related rules

NET-I031: MCP execution reaches E8
NET-I034: API actions reach E8
NET-I035: physical consequential actions reach E8
NET-I047: every discovery answers the eight questions
NET-S-tool-rollback: a rolled-back tool is refused
NET-L01: NET-L01 DISCOVERY IS NOT TRUST

← NET-L17 · all 298 · NET-L19 →

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem