CAIN-42 invariant · E24

NET-O-identity-provider: identity-provider outage denies instead of trusting

Held · CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric

Last reviewed 2026-10-01

held   niche Identity, authority & delegation

What this rule means

CAIN-42 must always satisfy: identity-provider outage denies instead of trusting. It is one of 298 invariants checked for CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

[
 "CALLER_IDENTITY_PROVIDER_UNAVAILABLE",
 "DEPENDENCY_UNAVAILABLE:identity-provider",
 "TARGET_IDENTITY_PROVIDER_UNAVAILABLE"
]

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · SHA-256 manifest

Related rules

• NET-I001: discovery cannot create authority
• NET-I002: communication cannot create authority
• NET-I003: negotiation cannot create authority
• NET-I004: contract cannot create authority
• NET-I005: reputation cannot create authority
• NET-I006: payment cannot create authority
• NET-I007: coalition cannot create authority
• NET-I008: federation cannot create authority

← NET-S-container-rollback · all 298 · NET-O-attestation-provider →