CAIN-42 invariant · E27

I-SWE-read_repo: swe read_repo

Held · CAIN-42 Evolution 27 -- Agentic Internet Control Plane

Last reviewed 2026-10-01

held   niche Core guarantees · family swe

What this rule means

CAIN-42 must always satisfy: swe read_repo. It is one of 757 invariants checked for CAIN-42 Evolution 27 -- Agentic Internet Control Plane. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

{'ok': True, 'record': {'operation': 'read_repo', 'target': 'src/x.py', 'capability': 'write', 'transaction_id': 't', 'intent_digest': 'i', 'scope': ['src/'], 'requires_authorization': True, 'authorit

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Related rules

• I-XDOMAIN-untrusted: untrusted issuer refused
• I-XDOMAIN-action: untrusted action refused
• I-COG-fast: select fast
• I-COG-reasoning: select reasoning
• I-COG-specialist: select specialist
• I-COG-vision: select vision
• I-COG-coding: select coding
• I-COG-retrieval: select retrieval

← I-SELFREPORT-verified · all 757 · I-SWE-modify_code →