CAIN-42 invariant · E34
E34-IMMUNESIG-model_substitution: the immune system detects model_substitution
Held · CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency
Last reviewed 2026-10-01
held niche Attacks, threats & containment · family immune_v3
What this rule means
CAIN-42 must always satisfy: the immune system detects model_substitution. It is one of 627 invariants checked for CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.
Recorded detail
{'scenarios': 5, 'not_held': []}Verify it in your browser
Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).
Check it yourself
Browse the raw bundle · How to reproduce it · SHA-256 manifest
Scope: An in-process TESTED library; not hosted. The proof fabric composes E25/E28/E30/E31/E33 but is not wired into the hosted gateway, MCPGate or the clusters.
Related rules
- E34-IMMUNESIG-proof_forgery: the immune system detects proof_forgery
- E34-IMMUNESIG-proof_chain_discontinuity: the immune system detects proof_chain_discontinuity
- E34-IMMUNESIG-authority_laundering: the immune system detects authority_laundering
- E34-IMMUNESIG-capability_laundering: the immune system detects capability_laundering
- E34-IMMUNESIG-identity_cloning: the immune system detects identity_cloning
- E34-IMMUNESIG-delegation_amplification: the immune system detects delegation_amplification
- E34-IMMUNESIG-governance_bypass: the immune system detects governance_bypass
- E34-IMMUNESIG-collective_compromise: the immune system detects collective_compromise
← E34-IMMUNESIG-economic_manipulation · all 627 · E34-IMMUNESIG-runtime_substitution →
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem