CAIN-42 invariant · E34
E34-SURFACE-shell: surface shell states its real class and basis
Held · CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency
Last reviewed 2026-10-01
held niche Benchmarks, coverage & performance · family coverage
What this rule means
CAIN-42 must always satisfy: surface shell states its real class and basis. It is one of 627 invariants checked for CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.
Recorded detail
'shell'Verify it in your browser
Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).
Check it yourself
Browse the raw bundle · How to reproduce it · SHA-256 manifest
Scope: An in-process TESTED library; not hosted. The proof fabric composes E25/E28/E30/E31/E33 but is not wired into the hosted gateway, MCPGate or the clusters.
Related rules
- E34-COVCLASS-ENFORCED: coverage class ENFORCED exists and is never auto-universal
- E34-COVCLASS-MONITORED: coverage class MONITORED exists and is never auto-universal
- E34-COVCLASS-OBSERVED: coverage class OBSERVED exists and is never auto-universal
- E34-COVCLASS-PARTIALLY_ENFORCED: coverage class PARTIALLY_ENFORCED exists and is never auto-universal
- E34-COVCLASS-BYPASSABLE: coverage class BYPASSABLE exists and is never auto-universal
- E34-COVCLASS-UNCONTROLLED: coverage class UNCONTROLLED exists and is never auto-universal
- E34-COVCLASS-UNKNOWN: coverage class UNKNOWN exists and is never auto-universal
- E34-SURFACE-mcp: surface mcp states its real class and basis
← E34-SURFACE-cli · all 627 · E34-SURFACE-filesystem →
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem