| I-TRUST-low-control | low: control action ALLOWs | Trust & reputation | held |
| I-TRUST-low-identity | low: dim identity | Trust & reputation | held |
| I-TRUST-low-attestation | low: dim attestation | Trust & reputation | held |
| I-TRUST-low-provenance | low: dim provenance | Trust & reputation | held |
| I-TRUST-low-capability | low: dim capability | Trust & reputation | held |
| I-TRUST-low-runtime | low: dim runtime | Trust & reputation | held |
| I-TRUST-low-model | low: dim model | Trust & reputation | held |
| I-TRUST-low-behavior | low: dim behavior | Trust & reputation | held |
| I-TRUST-low-execution | low: dim execution | Trust & reputation | held |
| I-TRUST-low-evidence | low: dim evidence | Trust & reputation | held |
| I-TRUST-low-delegation | low: dim delegation | Trust & reputation | held |
| I-TRUST-low-organizational | low: dim organizational | Trust & reputation | held |
| I-TRUST-low-economic | low: dim economic | Trust & reputation | held |
| I-TRUST-low-communication | low: dim communication | Trust & reputation | held |
| I-TRUST-low-security | low: dim security | Trust & reputation | held |
| I-TRUST-low-policy | low: dim policy | Trust & reputation | held |
| I-TRUST-low-temporal | low: dim temporal | Trust & reputation | held |
| I-TRUST-low-cross_domain | low: dim cross_domain | Trust & reputation | held |
| I-TRUST-medium-control | medium: control action ALLOWs | Trust & reputation | held |
| I-TRUST-medium-identity | medium: dim identity | Trust & reputation | held |
| I-TRUST-medium-attestation | medium: dim attestation | Trust & reputation | held |
| I-TRUST-medium-provenance | medium: dim provenance | Trust & reputation | held |
| I-TRUST-medium-capability | medium: dim capability | Trust & reputation | held |
| I-TRUST-medium-runtime | medium: dim runtime | Trust & reputation | held |
| I-TRUST-medium-model | medium: dim model | Trust & reputation | held |
| I-TRUST-medium-behavior | medium: dim behavior | Trust & reputation | held |
| I-TRUST-medium-execution | medium: dim execution | Trust & reputation | held |
| I-TRUST-medium-evidence | medium: dim evidence | Trust & reputation | held |
| I-TRUST-medium-delegation | medium: dim delegation | Trust & reputation | held |
| I-TRUST-medium-organizational | medium: dim organizational | Trust & reputation | held |
| I-TRUST-medium-economic | medium: dim economic | Trust & reputation | held |
| I-TRUST-medium-communication | medium: dim communication | Trust & reputation | held |
| I-TRUST-medium-security | medium: dim security | Trust & reputation | held |
| I-TRUST-medium-policy | medium: dim policy | Trust & reputation | held |
| I-TRUST-medium-temporal | medium: dim temporal | Trust & reputation | held |
| I-TRUST-medium-cross_domain | medium: dim cross_domain | Trust & reputation | held |
| I-TRUST-high-control | high: control action ALLOWs | Trust & reputation | held |
| I-TRUST-high-identity | high: dim identity | Trust & reputation | held |
| I-TRUST-high-attestation | high: dim attestation | Trust & reputation | held |
| I-TRUST-high-provenance | high: dim provenance | Trust & reputation | held |
| I-TRUST-high-capability | high: dim capability | Trust & reputation | held |
| I-TRUST-high-runtime | high: dim runtime | Trust & reputation | held |
| I-TRUST-high-model | high: dim model | Trust & reputation | held |
| I-TRUST-high-behavior | high: dim behavior | Trust & reputation | held |
| I-TRUST-high-execution | high: dim execution | Trust & reputation | held |
| I-TRUST-high-evidence | high: dim evidence | Trust & reputation | held |
| I-TRUST-high-delegation | high: dim delegation | Trust & reputation | held |
| I-TRUST-high-organizational | high: dim organizational | Trust & reputation | held |
| I-TRUST-high-economic | high: dim economic | Trust & reputation | held |
| I-TRUST-high-communication | high: dim communication | Trust & reputation | held |
| I-TRUST-high-security | high: dim security | Trust & reputation | held |
| I-TRUST-high-policy | high: dim policy | Trust & reputation | held |
| I-TRUST-high-temporal | high: dim temporal | Trust & reputation | held |
| I-TRUST-high-cross_domain | high: dim cross_domain | Trust & reputation | held |
| I-TRUST-critical-control | critical: control action ALLOWs | Trust & reputation | held |
| I-TRUST-critical-identity | critical: dim identity | Trust & reputation | held |
| I-TRUST-critical-attestation | critical: dim attestation | Trust & reputation | held |
| I-TRUST-critical-provenance | critical: dim provenance | Trust & reputation | held |
| I-TRUST-critical-capability | critical: dim capability | Trust & reputation | held |
| I-TRUST-critical-runtime | critical: dim runtime | Trust & reputation | held |
| I-TRUST-critical-model | critical: dim model | Trust & reputation | held |
| I-TRUST-critical-behavior | critical: dim behavior | Trust & reputation | held |
| I-TRUST-critical-execution | critical: dim execution | Trust & reputation | held |
| I-TRUST-critical-evidence | critical: dim evidence | Trust & reputation | held |
| I-TRUST-critical-delegation | critical: dim delegation | Trust & reputation | held |
| I-TRUST-critical-organizational | critical: dim organizational | Trust & reputation | held |
| I-TRUST-critical-economic | critical: dim economic | Trust & reputation | held |
| I-TRUST-critical-communication | critical: dim communication | Trust & reputation | held |
| I-TRUST-critical-security | critical: dim security | Trust & reputation | held |
| I-TRUST-critical-policy | critical: dim policy | Trust & reputation | held |
| I-TRUST-critical-temporal | critical: dim temporal | Trust & reputation | held |
| I-TRUST-critical-cross_domain | critical: dim cross_domain | Trust & reputation | held |
| I-CAP-configure-no_delegation | configure: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-configure-target_out_of_scope | configure: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-configure-unregistered | configure: unregistered refused | Identity, authority & delegation | held |
| I-CAP-create-no_delegation | create: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-create-target_out_of_scope | create: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-create-unregistered | create: unregistered refused | Identity, authority & delegation | held |
| I-CAP-credential-no_delegation | credential: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-credential-target_out_of_scope | credential: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-credential-unregistered | credential: unregistered refused | Identity, authority & delegation | held |
| I-CAP-delegate-no_delegation | delegate: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-delegate-target_out_of_scope | delegate: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-delegate-unregistered | delegate: unregistered refused | Identity, authority & delegation | held |
| I-CAP-delete-no_delegation | delete: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-delete-target_out_of_scope | delete: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-delete-unregistered | delete: unregistered refused | Identity, authority & delegation | held |
| I-CAP-deploy-no_delegation | deploy: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-deploy-target_out_of_scope | deploy: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-deploy-unregistered | deploy: unregistered refused | Identity, authority & delegation | held |
| I-CAP-destroy-no_delegation | destroy: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-destroy-target_out_of_scope | destroy: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-destroy-unregistered | destroy: unregistered refused | Identity, authority & delegation | held |
| I-CAP-execute-no_delegation | execute: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-execute-target_out_of_scope | execute: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-execute-unregistered | execute: unregistered refused | Identity, authority & delegation | held |
| I-CAP-list-no_delegation | list: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-list-target_out_of_scope | list: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-list-unregistered | list: unregistered refused | Identity, authority & delegation | held |
| I-CAP-notify-no_delegation | notify: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-notify-target_out_of_scope | notify: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-notify-unregistered | notify: unregistered refused | Identity, authority & delegation | held |
| I-CAP-observe-no_delegation | observe: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-observe-target_out_of_scope | observe: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-observe-unregistered | observe: unregistered refused | Identity, authority & delegation | held |
| I-CAP-pay-no_delegation | pay: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-pay-target_out_of_scope | pay: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-pay-unregistered | pay: unregistered refused | Identity, authority & delegation | held |
| I-CAP-query-no_delegation | query: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-query-target_out_of_scope | query: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-query-unregistered | query: unregistered refused | Identity, authority & delegation | held |
| I-CAP-read-no_delegation | read: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-read-target_out_of_scope | read: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-read-unregistered | read: unregistered refused | Identity, authority & delegation | held |
| I-CAP-send-no_delegation | send: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-send-target_out_of_scope | send: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-send-unregistered | send: unregistered refused | Identity, authority & delegation | held |
| I-CAP-submit-no_delegation | submit: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-submit-target_out_of_scope | submit: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-submit-unregistered | submit: unregistered refused | Identity, authority & delegation | held |
| I-CAP-transfer-no_delegation | transfer: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-transfer-target_out_of_scope | transfer: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-transfer-unregistered | transfer: unregistered refused | Identity, authority & delegation | held |
| I-CAP-write-no_delegation | write: no_delegation refused | Identity, authority & delegation | held |
| I-CAP-write-target_out_of_scope | write: target_out_of_scope refused | Identity, authority & delegation | held |
| I-CAP-write-unregistered | write: unregistered refused | Identity, authority & delegation | held |
| I-ADAPTER-a2a-events_recorded | a2a: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-signed_envelope_identity | a2a: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-unsigned_envelope_refused | a2a: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-unmapped_operation_refused | a2a: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-relabel_refused | a2a: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-deny_respected | a2a: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-commit_without_allow_refused | a2a: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-executor_sealed | a2a: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-parameter_mutation_refused | a2a: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-token_single_use | a2a: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-binding_change_invalidates | a2a: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-policy_change_invalidates | a2a: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-receipt_chain_verifies | a2a: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-quarantine_cascades | a2a: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-a2a-replay_matches | a2a: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-events_recorded | browser: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-signed_envelope_identity | browser: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-unsigned_envelope_refused | browser: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-unmapped_operation_refused | browser: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-relabel_refused | browser: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-deny_respected | browser: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-commit_without_allow_refused | browser: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-executor_sealed | browser: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-parameter_mutation_refused | browser: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-token_single_use | browser: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-binding_change_invalidates | browser: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-policy_change_invalidates | browser: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-receipt_chain_verifies | browser: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-quarantine_cascades | browser: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-browser-replay_matches | browser: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-events_recorded | cli: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-signed_envelope_identity | cli: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-unsigned_envelope_refused | cli: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-unmapped_operation_refused | cli: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-relabel_refused | cli: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-deny_respected | cli: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-commit_without_allow_refused | cli: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-executor_sealed | cli: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-parameter_mutation_refused | cli: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-token_single_use | cli: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-binding_change_invalidates | cli: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-policy_change_invalidates | cli: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-receipt_chain_verifies | cli: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-quarantine_cascades | cli: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cli-replay_matches | cli: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-events_recorded | cloud_api: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-signed_envelope_identity | cloud_api: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-unsigned_envelope_refused | cloud_api: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-unmapped_operation_refused | cloud_api: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-relabel_refused | cloud_api: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-deny_respected | cloud_api: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-commit_without_allow_refused | cloud_api: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-executor_sealed | cloud_api: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-parameter_mutation_refused | cloud_api: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-token_single_use | cloud_api: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-binding_change_invalidates | cloud_api: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-policy_change_invalidates | cloud_api: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-receipt_chain_verifies | cloud_api: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-quarantine_cascades | cloud_api: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-cloud_api-replay_matches | cloud_api: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-events_recorded | computer_use: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-signed_envelope_identity | computer_use: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-unsigned_envelope_refused | computer_use: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-unmapped_operation_refused | computer_use: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-relabel_refused | computer_use: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-deny_respected | computer_use: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-commit_without_allow_refused | computer_use: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-executor_sealed | computer_use: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-parameter_mutation_refused | computer_use: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-token_single_use | computer_use: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-binding_change_invalidates | computer_use: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-policy_change_invalidates | computer_use: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-receipt_chain_verifies | computer_use: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-quarantine_cascades | computer_use: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-computer_use-replay_matches | computer_use: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-events_recorded | container: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-signed_envelope_identity | container: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-unsigned_envelope_refused | container: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-unmapped_operation_refused | container: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-relabel_refused | container: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-deny_respected | container: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-commit_without_allow_refused | container: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-executor_sealed | container: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-parameter_mutation_refused | container: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-token_single_use | container: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-binding_change_invalidates | container: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-policy_change_invalidates | container: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-receipt_chain_verifies | container: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-quarantine_cascades | container: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-container-replay_matches | container: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-events_recorded | database: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-signed_envelope_identity | database: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-unsigned_envelope_refused | database: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-unmapped_operation_refused | database: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-relabel_refused | database: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-deny_respected | database: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-commit_without_allow_refused | database: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-executor_sealed | database: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-parameter_mutation_refused | database: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-token_single_use | database: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-binding_change_invalidates | database: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-policy_change_invalidates | database: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-receipt_chain_verifies | database: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-quarantine_cascades | database: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-database-replay_matches | database: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-events_recorded | deployment: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-signed_envelope_identity | deployment: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-unsigned_envelope_refused | deployment: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-unmapped_operation_refused | deployment: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-relabel_refused | deployment: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-deny_respected | deployment: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-commit_without_allow_refused | deployment: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-executor_sealed | deployment: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-parameter_mutation_refused | deployment: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-token_single_use | deployment: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-binding_change_invalidates | deployment: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-policy_change_invalidates | deployment: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-receipt_chain_verifies | deployment: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-quarantine_cascades | deployment: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-deployment-replay_matches | deployment: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-events_recorded | event_stream: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-signed_envelope_identity | event_stream: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-unsigned_envelope_refused | event_stream: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-unmapped_operation_refused | event_stream: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-relabel_refused | event_stream: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-deny_respected | event_stream: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-commit_without_allow_refused | event_stream: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-executor_sealed | event_stream: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-parameter_mutation_refused | event_stream: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-token_single_use | event_stream: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-binding_change_invalidates | event_stream: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-policy_change_invalidates | event_stream: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-receipt_chain_verifies | event_stream: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-quarantine_cascades | event_stream: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-event_stream-replay_matches | event_stream: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-events_recorded | filesystem: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-signed_envelope_identity | filesystem: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-unsigned_envelope_refused | filesystem: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-unmapped_operation_refused | filesystem: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-relabel_refused | filesystem: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-deny_respected | filesystem: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-commit_without_allow_refused | filesystem: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-executor_sealed | filesystem: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-parameter_mutation_refused | filesystem: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-token_single_use | filesystem: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-binding_change_invalidates | filesystem: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-policy_change_invalidates | filesystem: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-receipt_chain_verifies | filesystem: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-quarantine_cascades | filesystem: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-filesystem-replay_matches | filesystem: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-events_recorded | grpc: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-signed_envelope_identity | grpc: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-unsigned_envelope_refused | grpc: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-unmapped_operation_refused | grpc: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-relabel_refused | grpc: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-deny_respected | grpc: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-commit_without_allow_refused | grpc: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-executor_sealed | grpc: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-parameter_mutation_refused | grpc: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-token_single_use | grpc: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-binding_change_invalidates | grpc: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-policy_change_invalidates | grpc: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-receipt_chain_verifies | grpc: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-quarantine_cascades | grpc: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-grpc-replay_matches | grpc: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-events_recorded | http: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-signed_envelope_identity | http: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-unsigned_envelope_refused | http: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-unmapped_operation_refused | http: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-relabel_refused | http: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-deny_respected | http: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-commit_without_allow_refused | http: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-executor_sealed | http: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-parameter_mutation_refused | http: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-token_single_use | http: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-binding_change_invalidates | http: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-policy_change_invalidates | http: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-receipt_chain_verifies | http: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-quarantine_cascades | http: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-http-replay_matches | http: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-events_recorded | jsonrpc: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-signed_envelope_identity | jsonrpc: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-unsigned_envelope_refused | jsonrpc: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-unmapped_operation_refused | jsonrpc: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-relabel_refused | jsonrpc: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-deny_respected | jsonrpc: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-commit_without_allow_refused | jsonrpc: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-executor_sealed | jsonrpc: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-parameter_mutation_refused | jsonrpc: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-token_single_use | jsonrpc: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-binding_change_invalidates | jsonrpc: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-policy_change_invalidates | jsonrpc: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-receipt_chain_verifies | jsonrpc: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-quarantine_cascades | jsonrpc: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-jsonrpc-replay_matches | jsonrpc: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-events_recorded | local_ipc: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-signed_envelope_identity | local_ipc: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-unsigned_envelope_refused | local_ipc: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-unmapped_operation_refused | local_ipc: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-relabel_refused | local_ipc: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-deny_respected | local_ipc: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-commit_without_allow_refused | local_ipc: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-executor_sealed | local_ipc: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-parameter_mutation_refused | local_ipc: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-token_single_use | local_ipc: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-binding_change_invalidates | local_ipc: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-policy_change_invalidates | local_ipc: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-receipt_chain_verifies | local_ipc: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-quarantine_cascades | local_ipc: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-local_ipc-replay_matches | local_ipc: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-events_recorded | mcp: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-signed_envelope_identity | mcp: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-unsigned_envelope_refused | mcp: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-unmapped_operation_refused | mcp: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-relabel_refused | mcp: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-deny_respected | mcp: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-commit_without_allow_refused | mcp: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-executor_sealed | mcp: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-parameter_mutation_refused | mcp: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-token_single_use | mcp: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-binding_change_invalidates | mcp: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-policy_change_invalidates | mcp: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-receipt_chain_verifies | mcp: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-quarantine_cascades | mcp: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-mcp-replay_matches | mcp: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-events_recorded | message_queue: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-signed_envelope_identity | message_queue: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-unsigned_envelope_refused | message_queue: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-unmapped_operation_refused | message_queue: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-relabel_refused | message_queue: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-deny_respected | message_queue: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-commit_without_allow_refused | message_queue: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-executor_sealed | message_queue: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-parameter_mutation_refused | message_queue: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-token_single_use | message_queue: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-binding_change_invalidates | message_queue: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-policy_change_invalidates | message_queue: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-receipt_chain_verifies | message_queue: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-quarantine_cascades | message_queue: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-message_queue-replay_matches | message_queue: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-events_recorded | shell: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-signed_envelope_identity | shell: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-unsigned_envelope_refused | shell: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-unmapped_operation_refused | shell: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-relabel_refused | shell: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-deny_respected | shell: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-commit_without_allow_refused | shell: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-executor_sealed | shell: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-parameter_mutation_refused | shell: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-token_single_use | shell: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-binding_change_invalidates | shell: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-policy_change_invalidates | shell: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-receipt_chain_verifies | shell: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-quarantine_cascades | shell: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-shell-replay_matches | shell: replay_matches | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-events_recorded | websocket: events_recorded | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-signed_envelope_identity | websocket: signed_envelope_identity | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-unsigned_envelope_refused | websocket: unsigned_envelope_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-unmapped_operation_refused | websocket: unmapped_operation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-relabel_refused | websocket: relabel_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-deny_respected | websocket: deny_respected | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-commit_without_allow_refused | websocket: commit_without_allow_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-executor_sealed | websocket: executor_sealed | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-parameter_mutation_refused | websocket: parameter_mutation_refused | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-token_single_use | websocket: token_single_use | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-binding_change_invalidates | websocket: binding_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-policy_change_invalidates | websocket: policy_change_invalidates | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-receipt_chain_verifies | websocket: receipt_chain_verifies | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-quarantine_cascades | websocket: quarantine_cascades | Tools, MCP, protocols & adapters | held |
| I-ADAPTER-websocket-replay_matches | websocket: replay_matches | Tools, MCP, protocols & adapters | held |
| I-BIND-intent | mutated intent cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-execution_target | mutated execution_target cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-operation | mutated operation cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-parameters | mutated parameters cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-requested_capabilities | mutated requested_capabilities cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-resource_scope | mutated resource_scope cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-delegation_chain | mutated delegation_chain cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-context_digest | mutated context_digest cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-agent_identity | mutated agent_identity cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-agent_instance_identity | mutated agent_instance_identity cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-principal_identity | mutated principal_identity cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-tenant_id | mutated tenant_id cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-nonce | mutated nonce cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-sequence_number | mutated sequence_number cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-timestamp_ms | mutated timestamp_ms cannot reuse authorization | Identity, authority & delegation | held |
| I-BIND-execution_adapter | mutated execution_adapter cannot reuse authorization | Identity, authority & delegation | held |
| I-SUB-model_id | changed model_id invalidates authorization | Attacks, threats & containment | held |
| I-SUB-model_version | changed model_version invalidates authorization | Attacks, threats & containment | held |
| I-SUB-runtime_id | changed runtime_id invalidates authorization | Attacks, threats & containment | held |
| I-SUB-runtime_version | changed runtime_version invalidates authorization | Attacks, threats & containment | held |
| I-SUB-package_digest | changed package_digest invalidates authorization | Attacks, threats & containment | held |
| I-SUB-manifest_digest | changed manifest_digest invalidates authorization | Attacks, threats & containment | held |
| I-SUB-config_digest | changed config_digest invalidates authorization | Attacks, threats & containment | held |
| I-SUB-bom_digest | changed bom_digest invalidates authorization | Attacks, threats & containment | held |
| I-TX-IDENTIFIED | CREATED->IDENTIFIED | Core guarantees | held |
| I-TX-PROVENANCE_VERIFIED | CREATED->PROVENANCE_VERIFIED refused | Evidence, receipts & proofs | held |
| I-TX-INTENT_RECEIVED | CREATED->INTENT_RECEIVED refused | Core guarantees | held |
| I-TX-CAPABILITY_RESOLVED | CREATED->CAPABILITY_RESOLVED refused | Identity, authority & delegation | held |
| I-TX-DELEGATION_RESOLVED | CREATED->DELEGATION_RESOLVED refused | Identity, authority & delegation | held |
| I-TX-AUTHORITY_RESOLVED | CREATED->AUTHORITY_RESOLVED refused | Identity, authority & delegation | held |
| I-TX-POLICY_EVALUATED | CREATED->POLICY_EVALUATED refused | Policy, law & governance | held |
| I-TX-RISK_EVALUATED | CREATED->RISK_EVALUATED refused | Core guarantees | held |
| I-TX-AUTHORIZATION_PENDING | CREATED->AUTHORIZATION_PENDING refused | Identity, authority & delegation | held |
| I-TX-AUTHORIZED | CREATED->AUTHORIZED refused | Identity, authority & delegation | held |
| I-TX-EXECUTION_PREPARED | CREATED->EXECUTION_PREPARED refused | Core guarantees | held |
| I-TX-EXECUTING | CREATED->EXECUTING refused | Core guarantees | held |
| I-TX-EXECUTED | CREATED->EXECUTED refused | Core guarantees | held |
| I-TX-OUTCOME_RECORDED | CREATED->OUTCOME_RECORDED refused | Core guarantees | held |
| I-TX-EVIDENCE_COMMITTED | CREATED->EVIDENCE_COMMITTED refused | Evidence, receipts & proofs | held |
| I-TX-REVOKED | CREATED->REVOKED | Identity, authority & delegation | held |
| I-TX-ABORTED | CREATED->ABORTED | Core guarantees | held |
| I-TX-ROLLED_BACK | CREATED->ROLLED_BACK refused | Core guarantees | held |
| I-TX-EXPIRED | CREATED->EXPIRED | Core guarantees | held |
| I-TX-QUARANTINED | CREATED->QUARANTINED | Attacks, threats & containment | held |
| I-TX-DISPUTED | CREATED->DISPUTED refused | Transactions, markets & economics | held |
| I-TX-SUPERSEDED | CREATED->SUPERSEDED refused | Core guarantees | held |
| I-TX-AUTH-agent-d | AUTHORIZED only by engine+allow | Identity, authority & delegation | held |
| I-TX-AUTH-engine-empty | AUTHORIZED only by engine+allow | Identity, authority & delegation | held |
| I-TX-AUTH-engine-notallowed | AUTHORIZED only by engine+allow | Identity, authority & delegation | held |
| I-FIRE-instance-ISOLATE | firebreak instance/ISOLATE | Attacks, threats & containment | held |
| I-FIRE-instance-QUARANTINE | firebreak instance/QUARANTINE | Attacks, threats & containment | held |
| I-FIRE-instance-REVOKE | firebreak instance/REVOKE | Attacks, threats & containment | held |
| I-FIRE-instance-DRAIN | firebreak instance/DRAIN | Attacks, threats & containment | held |
| I-FIRE-capability-ISOLATE | firebreak capability/ISOLATE | Attacks, threats & containment | held |
| I-FIRE-capability-QUARANTINE | firebreak capability/QUARANTINE | Attacks, threats & containment | held |
| I-FIRE-capability-REVOKE | firebreak capability/REVOKE | Attacks, threats & containment | held |
| I-FIRE-capability-DRAIN | firebreak capability/DRAIN | Attacks, threats & containment | held |
| I-FIRE-adapter-ISOLATE | firebreak adapter/ISOLATE | Attacks, threats & containment | held |
| I-FIRE-adapter-QUARANTINE | firebreak adapter/QUARANTINE | Attacks, threats & containment | held |
| I-FIRE-adapter-REVOKE | firebreak adapter/REVOKE | Attacks, threats & containment | held |
| I-FIRE-adapter-DRAIN | firebreak adapter/DRAIN | Attacks, threats & containment | held |
| I-FIRE-trust_domain-ISOLATE | firebreak trust_domain/ISOLATE | Attacks, threats & containment | held |
| I-FIRE-trust_domain-QUARANTINE | firebreak trust_domain/QUARANTINE | Attacks, threats & containment | held |
| I-FIRE-trust_domain-REVOKE | firebreak trust_domain/REVOKE | Attacks, threats & containment | held |
| I-FIRE-trust_domain-DRAIN | firebreak trust_domain/DRAIN | Attacks, threats & containment | held |
| I-FIRE-tenant-ISOLATE | firebreak tenant/ISOLATE | Attacks, threats & containment | held |
| I-FIRE-tenant-QUARANTINE | firebreak tenant/QUARANTINE | Attacks, threats & containment | held |
| I-FIRE-tenant-REVOKE | firebreak tenant/REVOKE | Attacks, threats & containment | held |
| I-FIRE-tenant-DRAIN | firebreak tenant/DRAIN | Attacks, threats & containment | held |
| I-FIRE-endpoint-ISOLATE | firebreak endpoint/ISOLATE | Attacks, threats & containment | held |
| I-FIRE-endpoint-QUARANTINE | firebreak endpoint/QUARANTINE | Attacks, threats & containment | held |
| I-FIRE-endpoint-REVOKE | firebreak endpoint/REVOKE | Attacks, threats & containment | held |
| I-FIRE-endpoint-DRAIN | firebreak endpoint/DRAIN | Attacks, threats & containment | held |
| I-REPLAY-nonce | same nonce refused | Core guarantees | held |
| I-REPLAY-seq | lower sequence refused | Core guarantees | held |
| I-EXPIRY-stale | stale envelope refused | Evidence, receipts & proofs | held |
| I-EXPIRY-future | future envelope refused | Evidence, receipts & proofs | held |
| I-CRED-read-expired | read/expired refused | Identity, authority & delegation | held |
| I-CRED-read-audience | read/audience refused | Identity, authority & delegation | held |
| I-CRED-read-scope | read/scope refused | Identity, authority & delegation | held |
| I-CRED-read-rotated | read/rotated refused | Identity, authority & delegation | held |
| I-CRED-read-revoked | read/revoked refused | Identity, authority & delegation | held |
| I-CRED-read-pop | read/pop refused | Identity, authority & delegation | held |
| I-CRED-write-expired | write/expired refused | Identity, authority & delegation | held |
| I-CRED-write-audience | write/audience refused | Identity, authority & delegation | held |
| I-CRED-write-scope | write/scope refused | Identity, authority & delegation | held |
| I-CRED-write-rotated | write/rotated refused | Identity, authority & delegation | held |
| I-CRED-write-revoked | write/revoked refused | Identity, authority & delegation | held |
| I-CRED-write-pop | write/pop refused | Identity, authority & delegation | held |
| I-CRED-send-expired | send/expired refused | Identity, authority & delegation | held |
| I-CRED-send-audience | send/audience refused | Identity, authority & delegation | held |
| I-CRED-send-scope | send/scope refused | Identity, authority & delegation | held |
| I-CRED-send-rotated | send/rotated refused | Identity, authority & delegation | held |
| I-CRED-send-revoked | send/revoked refused | Identity, authority & delegation | held |
| I-CRED-send-pop | send/pop refused | Identity, authority & delegation | held |
| I-CRED-pay-expired | pay/expired refused | Identity, authority & delegation | held |
| I-CRED-pay-audience | pay/audience refused | Identity, authority & delegation | held |
| I-CRED-pay-scope | pay/scope refused | Identity, authority & delegation | held |
| I-CRED-pay-rotated | pay/rotated refused | Identity, authority & delegation | held |
| I-CRED-pay-revoked | pay/revoked refused | Identity, authority & delegation | held |
| I-CRED-pay-pop | pay/pop refused | Identity, authority & delegation | held |
| I-RISK-escalate | risk above threshold escalates | Core guarantees | held |
| I-TEMP-not_before | temporal scope not yet valid refused | Consensus & distributed systems | held |
| I-APPROVAL-quorum-required | critical requires quorum | Identity, authority & delegation | held |
| I-APPROVAL-quorum-met | critical with quorum ALLOWs | Identity, authority & delegation | held |
CAIN-42 CAIN Studio