CAIN-42 invariant · E27

I-ROUTE-credential: route credential

Held · CAIN-42 Evolution 27 -- Agentic Internet Control Plane

Last reviewed 2026-10-01

held niche Tools, MCP, protocols & adapters · family routing

What this rule means

CAIN-42 must always satisfy: route credential. It is one of 757 invariants checked for CAIN-42 Evolution 27 -- Agentic Internet Control Plane. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

{'capability': 'credential', 'chosen': 's1', 'ranked': [{'candidate': 's1', 'score': 989, 'reliability': 500}, {'candidate': 's2', 'score': 989, 'reliability': 500}], 'authority': 'NONE', 'authority_u

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Scope: {"limitation": "An in-process control-plane library. It coordinates E25/E26; enforcement remains in the E8 boundary. No hosted service, no external peer.", "status": "SCOPE"}

Related rules

I-DISC-0: discovery grants no authority
I-DISC-1: discovery grants no authority
I-DISC-2: discovery grants no authority
I-DISC-3: discovery grants no authority
I-DISC-4: discovery grants no authority
I-DISC-5: discovery grants no authority
I-DISC-6: discovery grants no authority
I-DISC-7: discovery grants no authority

← I-ROUTE-create · all 757 · I-ROUTE-delegate →

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem