CAIN-42 invariant · E31

E31-HS-unsupported_guarantees: unsupported_guarantees: a declaration alone never exceeds OBSERVED; probes decide

Held · CAIN-42 Evolution 31 -- Universal Proof-of-Governance Fabric

Last reviewed 2026-10-01

held   niche Identity, authority & delegation · family handshake

What this rule means

CAIN-42 must always satisfy: unsupported_guarantees: a declaration alone never exceeds OBSERVED; probes decide. It is one of 252 invariants checked for CAIN-42 Evolution 31 -- Universal Proof-of-Governance Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

({'class': 'UNKNOWN', 'declared': 'ENFORCED', 'basis': 'declaration'}, {'class': 'ENFORCED', 'declared': 'UNKNOWN', 'basis': 'probe'}, {'class': 'UNKNOWN', 'declared': 'ENFORCED', 'basis': 'probe'})

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Related rules

• E31-AF-identity: changing identity breaks the proof-carrying action binding
• E31-AF-capability: changing capability breaks the proof-carrying action binding
• E31-AF-delegation: changing delegation breaks the proof-carrying action binding
• E31-AF-authority: changing authority breaks the proof-carrying action binding
• E31-FC-AUTHORIZATION_DENIED: failure class AUTHORIZATION_DENIED is assigned only from matching evidence
• E31-FC-AUTHORIZATION_EXPIRED: failure class AUTHORIZATION_EXPIRED is assigned only from matching evidence
• E31-FC-AUTHORIZATION_REVOKED: failure class AUTHORIZATION_REVOKED is assigned only from matching evidence
• E31-FC-INSUFFICIENT_AUTHORITY: failure class INSUFFICIENT_AUTHORITY is assigned only from matching evidence

← E31-HS-supported_guarantees · all 252 · E31-CV-identity →