CAIN-42 invariant · E30

E30-REPLAY-ALLOW: replay explains why an action was allowed

Held · CAIN-42 Evolution 30 -- Governed Machine Autonomy Fabric

Last reviewed 2026-10-01

held   niche Benchmarks, coverage & performance · family end_to_end

What this rule means

CAIN-42 must always satisfy: replay explains why an action was allowed. It is one of 166 invariants checked for CAIN-42 Evolution 30 -- Governed Machine Autonomy Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

ALLOWED: identity current, lease and delegation cover the capability and resource, policy allowed, risk within ceiling, autonomy level and budget sufficient, E8 committed

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Related rules

• E30-COV-ENFORCED: coverage class 'ENFORCED' is a closed, reported category
• E30-COV-MONITORED: coverage class 'MONITORED' is a closed, reported category
• E30-COV-OBSERVED: coverage class 'OBSERVED' is a closed, reported category
• E30-COV-PARTIALLY_ENFORCED: coverage class 'PARTIALLY_ENFORCED' is a closed, reported category
• E30-COV-BYPASSABLE: coverage class 'BYPASSABLE' is a closed, reported category
• E30-COV-UNCONTROLLED: coverage class 'UNCONTROLLED' is a closed, reported category
• E30-COV-UNKNOWN: coverage class 'UNKNOWN' is a closed, reported category
• E30-COV-MONITORED: monitored paths are never counted as enforced

← E30-E2E-ORDER · all 166 · E30-REPLAY-DENY →