CAIN-42 invariant · E27
I-RISK-authority_escalation: forecast authority_escalation
Held · CAIN-42 Evolution 27 -- Agentic Internet Control Plane
Last reviewed 2026-10-01
held niche Identity, authority & delegation · family risk
What this rule means
CAIN-42 must always satisfy: forecast authority_escalation. It is one of 757 invariants checked for CAIN-42 Evolution 27 -- Agentic Internet Control Plane. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.
Recorded detail
{'subject': 's', 'risks': {'authority_escalation': 100, 'capability_drift': 0, 'behavioral_drift': 0, 'delegation_explosion': 0, 'network_exposure': 0, 'economic_exposure': 0, 'supply_chain_risk': 0, Verify it in your browser
Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).
Check it yourself
Browse the raw bundle · How to reproduce it · SHA-256 manifest
Scope: {"limitation": "An in-process control-plane library. It coordinates E25/E26; enforcement remains in the E8 boundary. No hosted service, no external peer.", "status": "SCOPE"}
Related rules
- I-AIP-DISCOVER: message DISCOVER
- I-AIP-IDENTIFY: message IDENTIFY
- I-AIP-ATTEST: message ATTEST
- I-AIP-NEGOTIATE: message NEGOTIATE
- I-AIP-REQUEST: message REQUEST
- I-AIP-DELEGATE: message DELEGATE
- I-AIP-AUTHORIZE: message AUTHORIZE
- I-AIP-EXECUTE: message EXECUTE
← I-MEM-not-authority · all 757 · I-RISK-capability_drift →
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem