CAIN-42 invariant · E25

I-CAP-deploy-target_out_of_scope: deploy: target_out_of_scope refused

Held · CAIN-42 Evolution 25 -- Universal Machine Agency Fabric

Last reviewed 2026-10-01

held niche Identity, authority & delegation · family capability

What this rule means

CAIN-42 must always satisfy: deploy: target_out_of_scope refused. It is one of 501 invariants checked for CAIN-42 Evolution 25 -- Universal Machine Agency Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

['CAPABILITY_NOT_DELEGATED', 'CAPABILITY_NOT_IN_AGENT_MANIFEST', 'RESOURCE_NOT_DELEGATED', 'TARGET_NOT_DELEGATED']

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Scope: {"limitation": "In-process governance library. Protocol adapters normalize REFERENCE messages; no third-party agent, MCP server or A2A peer has been governed.", "status": "SCOPE"}

Related rules

I-CAP-configure-no_delegation: configure: no_delegation refused
I-CAP-configure-target_out_of_scope: configure: target_out_of_scope refused
I-CAP-configure-unregistered: configure: unregistered refused
I-CAP-create-no_delegation: create: no_delegation refused
I-CAP-create-target_out_of_scope: create: target_out_of_scope refused
I-CAP-create-unregistered: create: unregistered refused
I-CAP-credential-no_delegation: credential: no_delegation refused
I-CAP-credential-target_out_of_scope: credential: target_out_of_scope refused

← I-CAP-deploy-no_delegation · all 501 · I-CAP-deploy-unregistered →

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem