CAIN-42 invariant · E27

I-REG-trust_domain-digest: trust_domain digest stable

Held · CAIN-42 Evolution 27 -- Agentic Internet Control Plane

Last reviewed 2026-10-01

held   niche Supply chain, registry & lifecycle · family registry

What this rule means

CAIN-42 must always satisfy: trust_domain digest stable. It is one of 757 invariants checked for CAIN-42 Evolution 27 -- Agentic Internet Control Plane. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Related rules

• I-REG-agent-register: register agent
• I-REG-agent-get: get agent
• I-REG-agent-mutation: mutation agent detected
• I-REG-agent-revoked: revoked agent not active
• I-REG-agent-reregister: revoked agent cannot be reissued
• I-REG-agent_instance-register: register agent_instance
• I-REG-agent_instance-get: get agent_instance
• I-REG-agent_instance-mutation: mutation agent_instance detected

← I-REG-trust_domain-issuer · all 757 · I-REG-runtime-issuer →