CAIN-42 CAIN StudioEvidence library · family
Credential
25 tested rules in the 'credential' family, 25 held.
Last reviewed 2026-10-01
25 of 25 held niche Identity, authority & delegation
What this family tests
Every rule the CAIN-42 test suites recorded under the family credential, across 2 evidence bundles. Each rule links to its own page with the recorded result and an in-browser check of the file it came from.
| ID | Rule | Bundle | Result |
|---|---|---|---|
| I-CRED-read-expired | read/expired refused | E25 | held |
| I-CRED-read-audience | read/audience refused | E25 | held |
| I-CRED-read-scope | read/scope refused | E25 | held |
| I-CRED-read-rotated | read/rotated refused | E25 | held |
| I-CRED-read-revoked | read/revoked refused | E25 | held |
| I-CRED-read-pop | read/pop refused | E25 | held |
| I-CRED-write-expired | write/expired refused | E25 | held |
| I-CRED-write-audience | write/audience refused | E25 | held |
| I-CRED-write-scope | write/scope refused | E25 | held |
| I-CRED-write-rotated | write/rotated refused | E25 | held |
| I-CRED-write-revoked | write/revoked refused | E25 | held |
| I-CRED-write-pop | write/pop refused | E25 | held |
| I-CRED-send-expired | send/expired refused | E25 | held |
| I-CRED-send-audience | send/audience refused | E25 | held |
| I-CRED-send-scope | send/scope refused | E25 | held |
| I-CRED-send-rotated | send/rotated refused | E25 | held |
| I-CRED-send-revoked | send/revoked refused | E25 | held |
| I-CRED-send-pop | send/pop refused | E25 | held |
| I-CRED-pay-expired | pay/expired refused | E25 | held |
| I-CRED-pay-audience | pay/audience refused | E25 | held |
| I-CRED-pay-scope | pay/scope refused | E25 | held |
| I-CRED-pay-rotated | pay/rotated refused | E25 | held |
| I-CRED-pay-revoked | pay/revoked refused | E25 | held |
| I-CRED-pay-pop | pay/pop refused | E25 | held |
| credential | every 'credential' invariant in this bundle (3 of 3 held) | E37 | held |
Other families in this niche
domain · moat · capability · handshake · action · authorization_binding · aip · research · state_machine · agency_graph · relationship · revocation · telemetry · integrity · operation_kind · graph · service_passport · radar · risk · event_kind · non_authority · binding · action_binding · operation_state
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem