CAIN-42 invariant · E33

E33-HANDSHAKE-ENFORCEMENT: an unknown ENFORCEMENT stops the handshake

Held · CAIN-42 Evolution 33 -- Governed Agentic Operating Fabric

Last reviewed 2026-10-01

held niche Identity, authority & delegation · family handshake

What this rule means

CAIN-42 must always satisfy: an unknown ENFORCEMENT stops the handshake. It is one of 581 invariants checked for CAIN-42 Evolution 33 -- Governed Agentic Operating Fabric. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

'ENFORCEMENT'

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Scope: An in-process TESTED library; not hosted; the operation kernel is not wired into the gateway, MCPGate or the clusters. The sidecar runs locally over stdio against a reference world.

Related rules

E33-STATE-AUTHORIZE: no state can be skipped after AUTHORIZE
E33-KIND-access_credential: access_credential is executed only through E8
E33-KIND-delegate_capability: delegate_capability is executed only through E8
E33-KIND-create_capability: create_capability is routed to E29 AgentCapabilityMarketplace conformance
E33-EVENT-capability_request: capability_request events chain and verify
E33-EVENT-authorization_request: authorization_request events chain and verify
E33-EVENT-delegation: delegation events chain and verify
E33-EXHAUST-STOP: exhaustion mode STOP never increases authority

← E33-HANDSHAKE-EVIDENCE · all 581 · E33-HANDSHAKE-PROOF →

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account → · Try the sandbox · See the whole ecosystem