CAIN-42 invariant · E31

E31-MK-conformance_pack: conformance_pack: artifacts carry provenance and untested ones stay UNVERIFIED

Held · CAIN-42 Evolution 31 -- Universal Proof-of-Governance Fabric

Last reviewed 2026-10-01

held   niche Transactions, markets & economics · family marketplace

What this rule means

CAIN-42 must always satisfy: conformance_pack: artifacts carry provenance and untested ones stay UNVERIFIED. It is one of 252 invariants checked for CAIN-42 Evolution 31 -- Universal Proof-of-Governance Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

{'body': {'category': 'conformance_pack', 'name': 'x', 'digest': 'dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd', 'publisher': 'zCUHc1ELZrgimI57Li3k5pPWi7MSdFDKGMR/Iyr8Ocs='}, 'signature_b64': 'ox7MVZ3Yod4+1Ik6SWXNlH+GupP

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Related rules

• E31-SV-GovernanceProofService: GovernanceProofService: infrastructure only; no pricing, customers or authority
• E31-SV-VerificationService: VerificationService: infrastructure only; no pricing, customers or authority
• E31-SV-ConformanceService: ConformanceService: infrastructure only; no pricing, customers or authority
• E31-SV-GovernanceCertificateService: GovernanceCertificateService: infrastructure only; no pricing, customers or authority
• E31-SV-TrustDomainService: TrustDomainService: infrastructure only; no pricing, customers or authority
• E31-SV-EvidenceVerificationService: EvidenceVerificationService: infrastructure only; no pricing, customers or authority
• E31-SV-IncidentVerificationService: IncidentVerificationService: infrastructure only; no pricing, customers or authority
• E31-MK-policy_pack: policy_pack: artifacts carry provenance and untested ones stay UNVERIFIED

← E31-MK-policy_pack · all 252 · E31-MK-verifier →