CAIN-42 invariant · E26

I-REV-credential: revoke credential

Held · CAIN-42 Evolution 26 -- Universal Machine Agency Trust Fabric

Last reviewed 2026-10-01

held   niche Identity, authority & delegation · family revocation

What this rule means

CAIN-42 must always satisfy: revoke credential. It is one of 532 invariants checked for CAIN-42 Evolution 26 -- Universal Machine Agency Trust Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

{'ok': True, 'revoked': ['credential:s-credential'], 'seq': 3, 'epoch': 0, 'propagation_us': 1.165, 'cascade': False, 'authority': 'NONE'}

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Related rules

• I-AUTHZ-binding-intent_digest-1: intent_digest mismatch detected
• I-AUTHZ-binding-intent_digest-2: intent_digest mismatch detected
• I-AUTHZ-binding-intent_digest-3: intent_digest mismatch detected
• I-AUTHZ-binding-intent_digest-4: intent_digest mismatch detected
• I-AUTHZ-binding-intent_digest-5: intent_digest mismatch detected
• I-AUTHZ-binding-intent_digest-6: intent_digest mismatch detected
• I-AUTHZ-binding-intent_digest-7: intent_digest mismatch detected
• I-AUTHZ-binding-action_digest-1: action_digest mismatch detected

← I-REV-instance · all 532 · I-REV-delegation →