CAIN-42 CAIN StudioCAIN-42 evidence library
90 invariants
From CAIN-42 Evolution 28 -- Portable Machine Agency & Execution Identity.
Last reviewed 2026-10-01
| ID | Rule | Niche | Result |
|---|---|---|---|
| E28-I1 | portable identity does not imply portable authority | Policy, law & governance | held |
| E28-I2 | delegated authority never exceeds parent authority (16 dimensions) | Policy, law & governance | held |
| E28-I3 | expired authority does not resurrect | Policy, law & governance | held |
| E28-I4 | revoked identity does not regain authority through replay | Policy, law & governance | held |
| E28-I5 | model substitution triggers explicit continuity evaluation | Policy, law & governance | held |
| E28-I6 | runtime substitution triggers explicit continuity evaluation | Policy, law & governance | held |
| E28-I7 | capability expansion does not occur through identity migration | Policy, law & governance | held |
| E28-I8 | consensus does not create authorization | Policy, law & governance | held |
| E28-I9 | confidence does not create authorization | Policy, law & governance | held |
| E28-I10 | research evidence does not automatically create authority | Policy, law & governance | held |
| E28-I11 | simulation does not become execution authorization | Policy, law & governance | held |
| E28-I12 | memory does not mint authority (restoring memory never restores an old lease) | Policy, law & governance | held |
| E28-I13 | a child agent cannot create authority for its parent | Policy, law & governance | held |
| E28-I14 | a subagent inherits bounded authority | Policy, law & governance | held |
| E28-I15 | unknown remains unknown (fork telemetry, risk, hardware, translation) | Policy, law & governance | held |
| E28-I16 | a governance receipt is not forgeable without the signing key | Policy, law & governance | held |
| E28-I17 | an execution identity is bound to its intended transaction | Policy, law & governance | held |
| E28-I18 | a stale authorization does not authorize materially changed execution | Policy, law & governance | held |
| E28-I19 | a forked identity does not silently merge with the original | Policy, law & governance | held |
| E28-I20 | every consequential governed execution reaches the E8 Action Commit boundary | Policy, law & governance | held |
| E28-I21 | identity envelope signed by another key is refused | Evidence, receipts & proofs | held |
| E28-I22 | a tampered envelope field is refused on decode | Evidence, receipts & proofs | held |
| E28-I23 | an envelope for another audience is refused | Evidence, receipts & proofs | held |
| E28-I24 | an expired envelope is refused | Evidence, receipts & proofs | held |
| E28-I25 | a session envelope cannot stand in for a transaction envelope | Evidence, receipts & proofs | held |
| E28-I26 | a transaction envelope cannot live longer than 30 s | Evidence, receipts & proofs | held |
| E28-I27 | the envelope authority field is always NONE, whatever the issuer is asked | Evidence, receipts & proofs | held |
| E28-I28 | every protocol carrier round-trips the envelope byte-identically | Tools, MCP, protocols & adapters | held |
| E28-I29 | a carrier altered in transit never yields a valid envelope | Tools, MCP, protocols & adapters | held |
| E28-I30 | an unknown protocol has no carrier | Tools, MCP, protocols & adapters | held |
| E28-I31 | registration without proof of possession is refused | Evidence, receipts & proofs | held |
| E28-I32 | a proof-of-possession challenge is single use | Evidence, receipts & proofs | held |
| E28-I33 | a key already bound to an identity cannot register again (clone) | Identity, authority & delegation | held |
| E28-I34 | a registration signed by a non-sponsor key is refused | Evidence, receipts & proofs | held |
| E28-I35 | declaring an unregistered capability is refused | Identity, authority & delegation | held |
| E28-I36 | a measurement mismatch gives attestation level 0 | Evidence, receipts & proofs | held |
| E28-I37 | hardware attestation is UNKNOWN, never simulated | Evidence, receipts & proofs | held |
| E28-I38 | an unchanged agent is SAME_GOVERNED_AGENT and keeps its live authority | Autonomy, control loops & recovery | held |
| E28-I39 | same identity presented with another key is IDENTITY_CLONE | Autonomy, control loops & recovery | held |
| E28-I40 | a signed succession gives CONTROLLED_SUCCESSOR with no retained authority | Autonomy, control loops & recovery | held |
| E28-I41 | a succession signed by the agent itself is not accepted | Autonomy, control loops & recovery | held |
| E28-I42 | a revoked identity presenting again is REVOKED_RESURRECTION | Autonomy, control loops & recovery | held |
| E28-I43 | an actor claiming an unknown identity is UNKNOWN_ACTOR | Autonomy, control loops & recovery | held |
| E28-I44 | a new key with a parent claim and no registration is UNVERIFIED_FORK | Autonomy, control loops & recovery | held |
| E28-I45 | a quarantine decision quarantines identity and E25 instance | Autonomy, control loops & recovery | held |
| E28-I46 | a lineage edge signed by anyone but its source is refused | Evidence, receipts & proofs | held |
| E28-I47 | a lineage cycle is refused | Evidence, receipts & proofs | held |
| E28-I48 | a tampered lineage edge is detected | Evidence, receipts & proofs | held |
| E28-I49 | a compressed path proof verifies; a tampered one does not | Evidence, receipts & proofs | held |
| E28-I50 | the root principal of a depth-2 subagent is the human sponsor | Evidence, receipts & proofs | held |
| E28-I51 | revoking a parent identity revokes every descendant identity, token and lease | Evidence, receipts & proofs | held |
| E28-I52 | an unknown delegation dimension is refused | Identity, authority & delegation | held |
| E28-I53 | an omitted dimension is inherited, never widened | Identity, authority & delegation | held |
| E28-I54 | a parent without downstream delegation cannot delegate | Identity, authority & delegation | held |
| E28-I55 | delegation beyond max depth is refused | Identity, authority & delegation | held |
| E28-I56 | a child cannot outlive its parent | Identity, authority & delegation | held |
| E28-I57 | a tampered delegation token is detected in the chain | Identity, authority & delegation | held |
| E28-I58 | revoking a delegation revokes every descendant token | Identity, authority & delegation | held |
| E28-I59 | the execution count bound is enforced | Identity, authority & delegation | held |
| E28-I60 | the economic budget bound is enforced | Identity, authority & delegation | held |
| E28-I61 | a region outside the grant is refused | Identity, authority & delegation | held |
| E28-I62 | risk that is not measured is refused, not assumed low | Identity, authority & delegation | held |
| E28-I63 | a deleted, reordered or altered receipt breaks the chain | Evidence, receipts & proofs | held |
| E28-I64 | a public-safe receipt commits to identities without revealing them | Evidence, receipts & proofs | held |
| E28-I65 | supersession and revocation are new receipts; status reflects them | Evidence, receipts & proofs | held |
| E28-I66 | a refused action also produces a signed receipt | Evidence, receipts & proofs | held |
| E28-I67 | every log entry has a verifying RFC 6962 inclusion proof | Evidence, receipts & proofs | held |
| E28-I68 | every earlier tree is provably a prefix of the current tree | Evidence, receipts & proofs | held |
| E28-I69 | an altered log entry is detected | Evidence, receipts & proofs | held |
| E28-I70 | a signed tree head verifies; a forged one does not | Evidence, receipts & proofs | held |
| E28-I71 | with insufficient telemetry the fork verdict is UNKNOWN | Consensus & distributed systems | held |
| E28-I72 | a duplicated nonce is reported as a fork signal | Consensus & distributed systems | held |
| E28-I73 | impossible concurrent use of an exclusive identity is detected | Consensus & distributed systems | held |
| E28-I74 | two successors claiming one parent are divergent descendants | Consensus & distributed systems | held |
| E28-I75 | an envelope from an unpinned trust domain is UNKNOWN | Evidence, receipts & proofs | held |
| E28-I76 | local authority is requested AND federated AND local sponsor AND home ceiling | Identity, authority & delegation | held |
| E28-I77 | a foreign envelope cannot be replayed into the receiving domain | Evidence, receipts & proofs | held |
| E28-I78 | digital-to-physical translation needs platform attestation | Evidence, receipts & proofs | held |
| E28-I79 | a revoked identity cannot renew its lease | Identity, authority & delegation | held |
| E28-I80 | renewal re-signs against the current identity and policy | Identity, authority & delegation | held |
| E28-I81 | the lease action budget is enforced | Identity, authority & delegation | held |
| E28-I82 | more test-time compute is not more authority | Transactions, markets & economics | held |
| E28-I83 | a self-improvement candidate cannot approve itself | Autonomy, control loops & recovery | held |
| E28-I84 | a candidate with any evaluation stage missing is not promoted | Autonomy, control loops & recovery | held |
| E28-I85 | learning from prediction error never changes the policy | Prediction, world models & simulation | held |
| E28-I86 | a research bid is bounded by the lease's economic permission; reward is not authority | Transactions, markets & economics | held |
| E28-I87 | selective disclosure verifies revealed attributes and detects a changed value | Memory, data & privacy | held |
| E28-I88 | the passport is signed and every section carries an epistemic label | Identity, authority & delegation | held |
| E28-I89 | the conformance runner executes every dimension against the real fabric | Policy, law & governance | held |
| E28-I90 | a subagent cannot spawn with a stolen parent token (wrong parent key) | Evidence, receipts & proofs | held |
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem