CAIN-42 CAIN StudioEvidence library · niche
Attacks, threats & containment
What happens when someone attacks: it is caught and contained. 418 tested invariants.
Last reviewed 2026-10-01
418 of 418 held
Test families in this niche
threat (44) · immune_v3 (29) · firebreak (24) · immune (23) · emergency (14) · chaos (14) · red_team (14) · economic_attack (13) · incident_step (12) · immune_step (11) · adversarial_generation (11) · compromise (10) · incident (10) · moat (10) · domain (10) · substitution (9) · economic_firebreak (9) · sybil (8) · causal_incident (7) · blue_team (7) · lab (7) · swarm (3) · field_tamper (3) · state_machine (2) · telemetry (2) · verifier_disagreement (2) · fabric_component (2) · environment_query (2) · relationship (2) · f2t (2) · risk (1) · out_of_band (1) · reassessment (1) · intent (1) · failure_to_test (1) · integrity (1) · soc (1) · config_key (1) · research_to_implementation (1) · plan_check_act (1) · trajectory (1) · r2e (1) · agency_graph (1) · systemic (1) · graph (1)
Where these come from
- CAIN-42 Evolution 33 -- Governed Agentic Operating Fabric: 59
- CAIN-42 Evolution 41 -- Machine Agency Exchange Fabric: 58
- CAIN-42 Evolution 35 -- Continuous Governance Intelligence Fabric: 51
- CAIN-42 Evolution 23 -- Governed Meta-Intelligence Fabric: 39
- CAIN-42 Evolution 27 -- Agentic Internet Control Plane: 39
- CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric: 37
- CAIN-42 Evolution 36 -- Machine Agency Exchange Fabric: 36
- CAIN-42 Evolution 25 -- Universal Machine Agency Fabric: 33
- CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency: 31
- CAIN-42 Evolution 26 -- Universal Machine Agency Trust Fabric: 13
- CAIN-42 Evolution 20 -- Governed Agentic Civilization Fabric: 5
- CAIN-42 Evolution 19 -- Governed Autonomy Operating Fabric: 3
- CAIN-42 Evolution 21 -- Governed Open-Ended Intelligence Fabric: 3
- CAIN-42 Evolution 31 -- Universal Proof-of-Governance Fabric: 2
- CAIN-42 Evolution 37 -- Autonomous Execution Mesh: 2
- CAIN-42 Evolution 39 -- Governed Agent Factory: 2
- CAIN-42 Evolution 42 -- Supreme Governed Agentic Infrastructure Platform: 2
- CAIN-42 Evolution 30 -- Governed Machine Autonomy Fabric: 1
- CAIN-42 Evolution 32 -- Governed Autonomy Learning Fabric: 1
- CAIN-42 Evolution 38 -- Portable Proof-Carrying Machine Agency: 1
Rules 301–418 of 418
| ID | Rule | Bundle | Result |
|---|---|---|---|
| E35-BT-verifier_check | blue-team proposal verifier_check exists | E35 | held |
| E35-BT-recovery_mechanism | blue-team proposal recovery_mechanism exists | E35 | held |
| E35-TRAJ-CONTAINMENT_REQUIRED | trajectory state CONTAINMENT_REQUIRED exists | E35 | held |
| E35-R2E-THREAT_OR_OPPORTUNITY | research-to-engineering stage THREAT_OR_OPPORTUNITY exists | E35 | held |
| E35-MOAT-adversarial_corpus | moat adversarial_corpus is technical, not a market moat | E35 | held |
| E35-MOAT-incident_corpus | moat incident_corpus is technical, not a market moat | E35 | held |
| E35-MOAT-continuous_red_teaming | moat continuous_red_teaming is technical, not a market moat | E35 | held |
| E35-SWARM-red_team | swarm role red_team exists | E35 | held |
| E35-SWARM-blue_team | swarm role blue_team exists | E35 | held |
| E35-SWARM-incident | swarm role incident exists | E35 | held |
| E35-LAB-new_agent_attacks | research-lab topic new_agent_attacks exists | E35 | held |
| E35-LAB-new_delegation_attacks | research-lab topic new_delegation_attacks exists | E35 | held |
| E35-LAB-new_computer_use_attacks | research-lab topic new_computer_use_attacks exists | E35 | held |
| E35-LAB-new_memory_attacks | research-lab topic new_memory_attacks exists | E35 | held |
| E35-LAB-new_economic_attacks | research-lab topic new_economic_attacks exists | E35 | held |
| E35-LAB-new_self_improvement_attacks | research-lab topic new_self_improvement_attacks exists | E35 | held |
| E35-LAB-new_multi_agent_attacks | research-lab topic new_multi_agent_attacks exists | E35 | held |
| E36-DOMAIN-ECON-ATTACK | signed domain ECON-ATTACK is defined | E36 | held |
| E36-DOMAIN-FIREBREAK | signed domain FIREBREAK is defined | E36 | held |
| E36-DOMAIN-THREAT-INTEL | signed domain THREAT-INTEL is defined | E36 | held |
| E36-DOMAIN-SUBSTITUTION | signed domain SUBSTITUTION is defined | E36 | held |
| E36-ATTACK-sybil | economic attack sybil is contained | E36 | held |
| E36-ATTACK-collusion | economic attack collusion is contained | E36 | held |
| E36-ATTACK-fake_reputation | economic attack fake_reputation is contained | E36 | held |
| E36-ATTACK-bid_manipulation | economic attack bid_manipulation is contained | E36 | held |
| E36-ATTACK-transaction_splitting | economic attack transaction_splitting is contained | E36 | held |
| E36-ATTACK-budget_exhaustion | economic attack budget_exhaustion is contained | E36 | held |
| E36-ATTACK-escrow_manipulation | economic attack escrow_manipulation is contained | E36 | held |
| E36-ATTACK-contract_ambiguity | economic attack contract_ambiguity is contained | E36 | held |
| E36-ATTACK-subcontracting_abuse | economic attack subcontracting_abuse is contained | E36 | held |
| E36-ATTACK-identity_rotation | economic attack identity_rotation is contained | E36 | held |
| E36-ATTACK-service_substitution | economic attack service_substitution is contained | E36 | held |
| E36-ATTACK-capability_laundering | economic attack capability_laundering is contained | E36 | held |
| E36-ATTACK-governance_laundering | economic attack governance_laundering is contained | E36 | held |
| E36-FIREBREAK-DETECT | firebreak step DETECT exists | E36 | held |
| E36-FIREBREAK-SCORE | firebreak step SCORE exists | E36 | held |
| E36-FIREBREAK-FREEZE_OPTIONAL_AUTHORITY | firebreak step FREEZE_OPTIONAL_AUTHORITY exists | E36 | held |
| E36-FIREBREAK-PRESERVE_EVIDENCE | firebreak step PRESERVE_EVIDENCE exists | E36 | held |
| E36-FIREBREAK-ISOLATE | firebreak step ISOLATE exists | E36 | held |
| E36-FIREBREAK-REVOKE_IF_AUTHORIZED | firebreak step REVOKE_IF_AUTHORIZED exists | E36 | held |
| E36-FIREBREAK-INVESTIGATE | firebreak step INVESTIGATE exists | E36 | held |
| E36-FIREBREAK-RECOVER | firebreak step RECOVER exists | E36 | held |
| E36-FIREBREAK-REAUTHORIZE | firebreak step REAUTHORIZE exists | E36 | held |
| E36-TELEMETRY-incident_rate | telemetry metric incident_rate exists | E36 | held |
| E36-AGENCY-NODE-incident | agency graph node incident exists | E36 | held |
| E36-MOAT-economic_threat_intelligence | moat economic_threat_intelligence is technical only | E36 | held |
| E36-MOAT-service_substitution_governance | moat service_substitution_governance is technical only | E36 | held |
| E36-DOMAIN2-ECON-ATTACK | domain ECON-ATTACK is a signed E36 domain | E36 | held |
| E36-DOMAIN2-FIREBREAK | domain FIREBREAK is a signed E36 domain | E36 | held |
| E36-DOMAIN2-THREAT-INTEL | domain THREAT-INTEL is a signed E36 domain | E36 | held |
| E36-DOMAIN2-SUBSTITUTION | domain SUBSTITUTION is a signed E36 domain | E36 | held |
| E36-MOAT2-economic_threat_intelligence | moat economic_threat_intelligence states its evidence and is not a market moat | E36 | held |
| E36-MOAT2-service_substitution_governance | moat service_substitution_governance states its evidence and is not a market moat | E36 | held |
| field_tamper | every 'field tamper' invariant in this bundle (199 of 199 held) | E37 | held |
| substitution | every 'substitution' invariant in this bundle (42 of 42 held) | E37 | held |
| field_tamper | every 'field tamper' invariant in this bundle (398 of 398 held) | E38 | held |
| field_tamper | every 'field tamper' invariant in this bundle (91 of 91 held) | E39 | held |
| red_team | every 'red team' invariant in this bundle (483 of 483 held) | E39 | held |
| E41-DOMAIN-THREAT | signed domain THREAT exists | E41 | held |
| E41-RELSTATE-QUARANTINED | relationship state QUARANTINED exists and is never collapsed | E41 | held |
| E41-BOUNDARY-containment | systemic risk reports the containment boundary | E41 | held |
| E41-SYBIL-SUSPECTED | sybil strength SUSPECTED exists | E41 | held |
| E41-SYBIL-SUPPORTED | sybil strength SUPPORTED exists | E41 | held |
| E41-SYBIL-VERIFIED | sybil strength VERIFIED exists | E41 | held |
| E41-SYBIL-UNKNOWN | sybil strength UNKNOWN exists | E41 | held |
| E41-THREAT-sybil | exchange attack sybil is contained | E41 | held |
| E41-THREAT-identity_cloning | exchange attack identity_cloning is contained | E41 | held |
| E41-THREAT-delegation_amplification | exchange attack delegation_amplification is contained | E41 | held |
| E41-THREAT-reputation_laundering | exchange attack reputation_laundering is contained | E41 | held |
| E41-THREAT-collusion | exchange attack collusion is contained | E41 | held |
| E41-THREAT-fake_evidence | exchange attack fake_evidence is contained | E41 | held |
| E41-THREAT-fake_completion | exchange attack fake_completion is contained | E41 | held |
| E41-THREAT-contract_manipulation | exchange attack contract_manipulation is contained | E41 | held |
| E41-THREAT-negotiation_poisoning | exchange attack negotiation_poisoning is contained | E41 | held |
| E41-THREAT-capability_substitution | exchange attack capability_substitution is contained | E41 | held |
| E41-THREAT-counterparty_substitution | exchange attack counterparty_substitution is contained | E41 | held |
| E41-THREAT-payment_replay | exchange attack payment_replay is contained | E41 | held |
| E41-THREAT-settlement_replay | exchange attack settlement_replay is contained | E41 | held |
| E41-THREAT-budget_exhaustion | exchange attack budget_exhaustion is contained | E41 | held |
| E41-THREAT-recursive_procurement | exchange attack recursive_procurement is contained | E41 | held |
| E41-THREAT-governance_bypass | exchange attack governance_bypass is contained | E41 | held |
| E41-THREAT-revocation_race | exchange attack revocation_race is contained | E41 | held |
| E41-THREAT-partition | exchange attack partition is contained | E41 | held |
| E41-THREAT-clock_manipulation | exchange attack clock_manipulation is contained | E41 | held |
| E41-THREAT-rollback | exchange attack rollback is contained | E41 | held |
| E41-THREAT-model_substitution | exchange attack model_substitution is contained | E41 | held |
| E41-THREAT-runtime_substitution | exchange attack runtime_substitution is contained | E41 | held |
| E41-F2T-INCIDENT | failure-to-test stage INCIDENT exists | E41 | held |
| E41-F2T-ATTACK_SCENARIO | failure-to-test stage ATTACK_SCENARIO exists | E41 | held |
| E41-REL2-QUARANTINED | relationship state QUARANTINED is reachable/held or explicitly refused | E41 | held |
| E41-THREAT2-sybil | attack sybil is contained with an invariant | E41 | held |
| E41-THREAT2-identity_cloning | attack identity_cloning is contained with an invariant | E41 | held |
| E41-THREAT2-delegation_amplification | attack delegation_amplification is contained with an invariant | E41 | held |
| E41-THREAT2-reputation_laundering | attack reputation_laundering is contained with an invariant | E41 | held |
| E41-THREAT2-collusion | attack collusion is contained with an invariant | E41 | held |
| E41-THREAT2-fake_evidence | attack fake_evidence is contained with an invariant | E41 | held |
| E41-THREAT2-fake_completion | attack fake_completion is contained with an invariant | E41 | held |
| E41-THREAT2-contract_manipulation | attack contract_manipulation is contained with an invariant | E41 | held |
| E41-THREAT2-negotiation_poisoning | attack negotiation_poisoning is contained with an invariant | E41 | held |
| E41-THREAT2-capability_substitution | attack capability_substitution is contained with an invariant | E41 | held |
| E41-THREAT2-counterparty_substitution | attack counterparty_substitution is contained with an invariant | E41 | held |
| E41-THREAT2-payment_replay | attack payment_replay is contained with an invariant | E41 | held |
| E41-THREAT2-settlement_replay | attack settlement_replay is contained with an invariant | E41 | held |
| E41-THREAT2-budget_exhaustion | attack budget_exhaustion is contained with an invariant | E41 | held |
| E41-THREAT2-recursive_procurement | attack recursive_procurement is contained with an invariant | E41 | held |
| E41-THREAT2-governance_bypass | attack governance_bypass is contained with an invariant | E41 | held |
| E41-THREAT2-revocation_race | attack revocation_race is contained with an invariant | E41 | held |
| E41-THREAT2-partition | attack partition is contained with an invariant | E41 | held |
| E41-THREAT2-clock_manipulation | attack clock_manipulation is contained with an invariant | E41 | held |
| E41-THREAT2-rollback | attack rollback is contained with an invariant | E41 | held |
| E41-THREAT2-model_substitution | attack model_substitution is contained with an invariant | E41 | held |
| E41-THREAT2-runtime_substitution | attack runtime_substitution is contained with an invariant | E41 | held |
| E41-SYB2-SUSPECTED | sybil strength SUSPECTED never treats correlation as proof | E41 | held |
| E41-SYB2-SUPPORTED | sybil strength SUPPORTED never treats correlation as proof | E41 | held |
| E41-SYB2-VERIFIED | sybil strength VERIFIED never treats correlation as proof | E41 | held |
| E41-SYB2-UNKNOWN | sybil strength UNKNOWN never treats correlation as proof | E41 | held |
| E42-DOMAIN-INCIDENT | signed domain INCIDENT exists | E42 | held |
| E42-GRAPH-incident | unified graph node kind incident exists | E42 | held |
Other niches
Consensus & distributed systems · Identity, authority & delegation · Evidence, receipts & proofs · Memory, data & privacy · Prediction, world models & simulation · Transactions, markets & economics · Tools, MCP, protocols & adapters · Autonomy, control loops & recovery · Policy, law & governance · Trust & reputation · Supply chain, registry & lifecycle · Benchmarks, coverage & performance · Core guarantees
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem