Evidence library · family
Threat
44 tested rules in the 'threat' family, 44 held.
Last reviewed 2026-10-01
44 of 44 held niche Attacks, threats & containment
What this family tests
Every rule the CAIN-42 test suites recorded under the family threat, across 1 evidence bundle. Each rule links to its own page with the recorded result and an in-browser check of the file it came from.
| ID | Rule | Bundle | Result |
|---|---|---|---|
| E41-THREAT-sybil | exchange attack sybil is contained | E41 | held |
| E41-THREAT-identity_cloning | exchange attack identity_cloning is contained | E41 | held |
| E41-THREAT-delegation_amplification | exchange attack delegation_amplification is contained | E41 | held |
| E41-THREAT-reputation_laundering | exchange attack reputation_laundering is contained | E41 | held |
| E41-THREAT-collusion | exchange attack collusion is contained | E41 | held |
| E41-THREAT-fake_evidence | exchange attack fake_evidence is contained | E41 | held |
| E41-THREAT-fake_completion | exchange attack fake_completion is contained | E41 | held |
| E41-THREAT-contract_manipulation | exchange attack contract_manipulation is contained | E41 | held |
| E41-THREAT-negotiation_poisoning | exchange attack negotiation_poisoning is contained | E41 | held |
| E41-THREAT-capability_substitution | exchange attack capability_substitution is contained | E41 | held |
| E41-THREAT-counterparty_substitution | exchange attack counterparty_substitution is contained | E41 | held |
| E41-THREAT-payment_replay | exchange attack payment_replay is contained | E41 | held |
| E41-THREAT-settlement_replay | exchange attack settlement_replay is contained | E41 | held |
| E41-THREAT-budget_exhaustion | exchange attack budget_exhaustion is contained | E41 | held |
| E41-THREAT-recursive_procurement | exchange attack recursive_procurement is contained | E41 | held |
| E41-THREAT-governance_bypass | exchange attack governance_bypass is contained | E41 | held |
| E41-THREAT-revocation_race | exchange attack revocation_race is contained | E41 | held |
| E41-THREAT-partition | exchange attack partition is contained | E41 | held |
| E41-THREAT-clock_manipulation | exchange attack clock_manipulation is contained | E41 | held |
| E41-THREAT-rollback | exchange attack rollback is contained | E41 | held |
| E41-THREAT-model_substitution | exchange attack model_substitution is contained | E41 | held |
| E41-THREAT-runtime_substitution | exchange attack runtime_substitution is contained | E41 | held |
| E41-THREAT2-sybil | attack sybil is contained with an invariant | E41 | held |
| E41-THREAT2-identity_cloning | attack identity_cloning is contained with an invariant | E41 | held |
| E41-THREAT2-delegation_amplification | attack delegation_amplification is contained with an invariant | E41 | held |
| E41-THREAT2-reputation_laundering | attack reputation_laundering is contained with an invariant | E41 | held |
| E41-THREAT2-collusion | attack collusion is contained with an invariant | E41 | held |
| E41-THREAT2-fake_evidence | attack fake_evidence is contained with an invariant | E41 | held |
| E41-THREAT2-fake_completion | attack fake_completion is contained with an invariant | E41 | held |
| E41-THREAT2-contract_manipulation | attack contract_manipulation is contained with an invariant | E41 | held |
| E41-THREAT2-negotiation_poisoning | attack negotiation_poisoning is contained with an invariant | E41 | held |
| E41-THREAT2-capability_substitution | attack capability_substitution is contained with an invariant | E41 | held |
| E41-THREAT2-counterparty_substitution | attack counterparty_substitution is contained with an invariant | E41 | held |
| E41-THREAT2-payment_replay | attack payment_replay is contained with an invariant | E41 | held |
| E41-THREAT2-settlement_replay | attack settlement_replay is contained with an invariant | E41 | held |
| E41-THREAT2-budget_exhaustion | attack budget_exhaustion is contained with an invariant | E41 | held |
| E41-THREAT2-recursive_procurement | attack recursive_procurement is contained with an invariant | E41 | held |
| E41-THREAT2-governance_bypass | attack governance_bypass is contained with an invariant | E41 | held |
| E41-THREAT2-revocation_race | attack revocation_race is contained with an invariant | E41 | held |
| E41-THREAT2-partition | attack partition is contained with an invariant | E41 | held |
| E41-THREAT2-clock_manipulation | attack clock_manipulation is contained with an invariant | E41 | held |
| E41-THREAT2-rollback | attack rollback is contained with an invariant | E41 | held |
| E41-THREAT2-model_substitution | attack model_substitution is contained with an invariant | E41 | held |
| E41-THREAT2-runtime_substitution | attack runtime_substitution is contained with an invariant | E41 | held |
Other families in this niche
domain · moat · state_machine · immune_v3 · agency_graph · relationship · firebreak · immune · telemetry · fabric_component · integrity · graph · risk · environment_query · emergency · chaos · red_team · reassessment · swarm · economic_attack · incident_step · immune_step · research_to_implementation · plan_check_act
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem