CAIN-42 CAIN StudioEvidence library · family
Substitution
9 tested rules in the 'substitution' family, 9 held.
Last reviewed 2026-10-01
9 of 9 held niche Attacks, threats & containment
What this family tests
Every rule the CAIN-42 test suites recorded under the family substitution, across 2 evidence bundles. Each rule links to its own page with the recorded result and an in-browser check of the file it came from.
| ID | Rule | Bundle | Result |
|---|---|---|---|
| I-SUB-model_id | changed model_id invalidates authorization | E25 | held |
| I-SUB-model_version | changed model_version invalidates authorization | E25 | held |
| I-SUB-runtime_id | changed runtime_id invalidates authorization | E25 | held |
| I-SUB-runtime_version | changed runtime_version invalidates authorization | E25 | held |
| I-SUB-package_digest | changed package_digest invalidates authorization | E25 | held |
| I-SUB-manifest_digest | changed manifest_digest invalidates authorization | E25 | held |
| I-SUB-config_digest | changed config_digest invalidates authorization | E25 | held |
| I-SUB-bom_digest | changed bom_digest invalidates authorization | E25 | held |
| substitution | every 'substitution' invariant in this bundle (42 of 42 held) | E37 | held |
Other families in this niche
domain · moat · threat · state_machine · immune_v3 · agency_graph · relationship · firebreak · immune · telemetry · fabric_component · integrity · graph · risk · environment_query · emergency · chaos · red_team · reassessment · swarm · economic_attack · incident_step · immune_step · research_to_implementation
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem