CAIN-42 invariant · E38

freshness: every 'freshness' invariant in this bundle (27 of 27 held)

Held · CAIN-42 Evolution 38 -- Portable Proof-Carrying Machine Agency

Last reviewed 2026-10-01

held   niche Consensus & distributed systems · family freshness

What this rule means

CAIN-42 must always satisfy: every 'freshness' invariant in this bundle (27 of 27 held). It is one of 24 invariants checked for CAIN-42 Evolution 38 -- Portable Proof-Carrying Machine Agency. An invariant is a rule the system may never break, whatever an agent or attacker does; the test suite tries to break it across many scenarios and records the result.

Recorded detail

{
 "held": 27,
 "total": 27
}

Products this protects

• CAIN Agent Passport — A signed passport that says who an agent is and what it may do.
• CAIN Conformance — Conformance testing for any system that claims to govern agents.
• CAIN Enterprise Verification — Independent checking of an enterprise's whole agent estate.
• CAIN Federation — Separate CAIN deployments that trust each other's decisions.
• CAIN Governance Audit — Audit an organisation's agent governance end to end.
• CAIN Governance Certificates — Signed certificates that an agent passed defined checks.
• CAIN Governance Evidence Cloud — Long-term storage for signed governance evidence.
• CAIN Governance Gateway — A gateway that applies governance to any agent traffic.
• CAIN Governance Receipts — A receipt for every governed action.
• CAIN Governance SDK — Libraries for building governance into your own products.
• CAIN Proof API — An API to fetch and check proofs.
• CAIN Trust Network — A network of organisations that trust each other's agents.
• CAIN Verify — One-click verification of any CAIN evidence.

Verify it in your browser

Your browser downloads the bundle's SHA256SUMS manifest and the file(s) behind this page, hashes them with SHA-256 locally (WebCrypto), and compares. A match shows the record you are reading is the published one; it does not by itself prove who published it (see the signed claims registry and the bundle verifier for that).

Check it yourself

Browse the raw bundle · How to reproduce it · SHA-256 manifest

← field_tamper · all 24 · handshake →