CAIN-42 invariant · E34

E34-ENVELOPE-execution_environment: the envelope binds execution_environment for every executed operation

Held · CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency

Last reviewed 2026-10-01

held   niche Evidence, receipts & proofs · family envelope

What this rule means

CAIN-42 must always satisfy: the envelope binds execution_environment for every executed operation. It is one of 627 invariants checked for CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

3

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

Related rules

• E34-ENVELOPE-proof_id: the envelope binds proof_id for every executed operation
• E34-ENVELOPE-proof_version: the envelope binds proof_version for every executed operation
• E34-ENVELOPE-action_id: the envelope binds action_id for every executed operation
• E34-ENVELOPE-operation_id: the envelope binds operation_id for every executed operation
• E34-ENVELOPE-transaction_id: the envelope binds transaction_id for every executed operation
• E34-ENVELOPE-agent_identity: the envelope binds agent_identity for every executed operation
• E34-ENVELOPE-agent_passport_digest: the envelope binds agent_passport_digest for every executed operation
• E34-ENVELOPE-identity_state: the envelope binds identity_state for every executed operation

← E34-ENVELOPE-model_runtime_version · all 627 · E34-ENVELOPE-capability_used →