CAIN-42 CAIN StudioEvidence library · niche
Identity, authority & delegation
Who an agent is, what it may do, and who allowed it. 964 tested invariants.
Last reviewed 2026-10-01
964 of 964 held
Test families in this niche
capability (54) · handshake (54) · authorization_binding (49) · aip (48) · revocation (26) · credential (25) · domain (21) · service_passport (21) · non_authority (18) · binding (16) · lease_v2 (15) · protected_key (14) · research (13) · state_machine (11) · cross_domain (11) · delegation (11) · kernel (11) · delegation_attenuation (9) · replay_revocation (9) · moat (9) · risk (6) · failure_class (6) · root_of_trust (6) · telemetry (5) · action (5) · action_binding (4) · config_key (4) · knowledge_revocation (4) · primitive (4) · agency_graph (4) · relationship (4) · delegation_receipt (3) · reassessment (3) · capability_passport (3) · authority_graph (3) · integrity (3) · consistency (3) · soc (3) · lease (3) · operation_kind (3) · event_kind (3) · exhaustion_mode (3) · gap_detector (3) · profile (3) · graph (3) · approval (2) · offline (2) · registration (2) · scientist (2) · radar (2) · federation (1) · intent (1) · tenancy (1) · cross-domain (1) · passport (1) · stage (1) · operation_state (1) · status (1) · environment_query (1) · ip (1) · competitive_gap (1) · authority_algebra (1) · minimum_authority (1) · systemic (1)
Where these come from
- CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric: 198
- CAIN-42 Evolution 25 -- Universal Machine Agency Fabric: 105
- CAIN-42 Evolution 26 -- Universal Machine Agency Trust Fabric: 90
- CAIN-42 Evolution 23 -- Governed Meta-Intelligence Fabric: 84
- CAIN-42 Evolution 27 -- Agentic Internet Control Plane: 64
- CAIN-42 Evolution 31 -- Universal Proof-of-Governance Fabric: 52
- CAIN-42 Evolution 33 -- Governed Agentic Operating Fabric: 49
- CAIN-42 Evolution 36 -- Machine Agency Exchange Fabric: 49
- CAIN-42 Evolution 19 -- Governed Autonomy Operating Fabric: 43
- CAIN-42 Evolution 21 -- Governed Open-Ended Intelligence Fabric: 40
- CAIN-42 Evolution 20 -- Governed Agentic Civilization Fabric: 36
- CAIN-42 Evolution 32 -- Governed Autonomy Learning Fabric: 34
- CAIN-42 Evolution 41 -- Machine Agency Exchange Fabric: 28
- CAIN-42 Evolution 42 -- Supreme Governed Agentic Infrastructure Platform: 24
- CAIN-42 Evolution 35 -- Continuous Governance Intelligence Fabric: 21
- CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency: 20
- CAIN-42 Evolution 28 -- Portable Machine Agency & Execution Identity: 18
- CAIN-42 Evolution 30 -- Governed Machine Autonomy Fabric: 2
- CAIN-42 Evolution 37 -- Autonomous Execution Mesh: 2
- CAIN-42 Evolution 38 -- Portable Proof-Carrying Machine Agency: 2
- CAIN-42 Evolution 29 -- Governed Agentic Internet Transaction Fabric: 1
- CAIN-42 Evolution 39 -- Governed Agent Factory: 1
- CAIN-42 Evolution 40 -- Autonomous Enterprise Intelligence Fabric: 1
Rules 601–750 of 964
| ID | Rule | Bundle | Result |
|---|---|---|---|
| I-AIP-REQUEST | message REQUEST | E27 | held |
| I-AIP-DELEGATE | message DELEGATE | E27 | held |
| I-AIP-AUTHORIZE | message AUTHORIZE | E27 | held |
| I-AIP-EXECUTE | message EXECUTE | E27 | held |
| I-AIP-RECEIPT | message RECEIPT | E27 | held |
| I-AIP-REVOKE | message REVOKE | E27 | held |
| I-AIP-QUARANTINE | message QUARANTINE | E27 | held |
| I-AIP-RECOVER | message RECOVER | E27 | held |
| I-AIP-ADAPTER-a2a | adapter a2a mapped | E27 | held |
| I-AIP-ADAPTER-browser | adapter browser mapped | E27 | held |
| I-AIP-ADAPTER-cli | adapter cli mapped | E27 | held |
| I-AIP-ADAPTER-cloud_api | adapter cloud_api mapped | E27 | held |
| I-AIP-ADAPTER-computer_use | adapter computer_use mapped | E27 | held |
| I-AIP-ADAPTER-container | adapter container mapped | E27 | held |
| I-AIP-ADAPTER-database | adapter database mapped | E27 | held |
| I-AIP-ADAPTER-deployment | adapter deployment mapped | E27 | held |
| I-AIP-ADAPTER-event_stream | adapter event_stream mapped | E27 | held |
| I-AIP-ADAPTER-filesystem | adapter filesystem mapped | E27 | held |
| I-AIP-ADAPTER-grpc | adapter grpc mapped | E27 | held |
| I-AIP-ADAPTER-http | adapter http mapped | E27 | held |
| I-AIP-ADAPTER-jsonrpc | adapter jsonrpc mapped | E27 | held |
| I-AIP-ADAPTER-local_ipc | adapter local_ipc mapped | E27 | held |
| I-AIP-ADAPTER-mcp | adapter mcp mapped | E27 | held |
| I-AIP-ADAPTER-message_queue | adapter message_queue mapped | E27 | held |
| I-AIP-ADAPTER-shell | adapter shell mapped | E27 | held |
| I-AIP-ADAPTER-websocket | adapter websocket mapped | E27 | held |
| I-GOAL-delegation_distortion | goal signal delegation_distortion | E27 | held |
| I-RESEARCH-LOOP-CAPABILITY_PROPOSAL | loop CAPABILITY_PROPOSAL | E27 | held |
| I-RESEARCH-not-rule | hypothesis is not an authorization rule | E27 | held |
| I-RISK-authority_escalation | forecast authority_escalation | E27 | held |
| I-RISK-capability_drift | forecast capability_drift | E27 | held |
| I-RISK-delegation_explosion | forecast delegation_explosion | E27 | held |
| I-TELEM-authorization | telemetry authorization | E27 | held |
| I-TELEM-delegation | telemetry delegation | E27 | held |
| I-TELEM-credential | telemetry credential | E27 | held |
| I-TENANT-isolation | cross-tenant evidence isolated | E27 | held |
| I-CONSIST-identity | consistency identity | E27 | held |
| I-CONSIST-authority | consistency authority | E27 | held |
| I-CONSIST-revocation | consistency revocation | E27 | held |
| I-SOC-authorization_failures | feed authorization_failures | E27 | held |
| I-SOC-identity_failures | feed identity_failures | E27 | held |
| I-SOC-revocations | feed revocations | E27 | held |
| I-ADAPTER-AIP-a2a | adapter a2a AIP | E27 | held |
| I-ADAPTER-AIP-browser | adapter browser AIP | E27 | held |
| I-ADAPTER-AIP-cli | adapter cli AIP | E27 | held |
| I-ADAPTER-AIP-cloud_api | adapter cloud_api AIP | E27 | held |
| I-ADAPTER-AIP-computer_use | adapter computer_use AIP | E27 | held |
| I-ADAPTER-AIP-container | adapter container AIP | E27 | held |
| I-ADAPTER-AIP-database | adapter database AIP | E27 | held |
| I-ADAPTER-AIP-deployment | adapter deployment AIP | E27 | held |
| I-ADAPTER-AIP-event_stream | adapter event_stream AIP | E27 | held |
| I-ADAPTER-AIP-filesystem | adapter filesystem AIP | E27 | held |
| I-ADAPTER-AIP-grpc | adapter grpc AIP | E27 | held |
| I-ADAPTER-AIP-http | adapter http AIP | E27 | held |
| I-ADAPTER-AIP-jsonrpc | adapter jsonrpc AIP | E27 | held |
| I-ADAPTER-AIP-local_ipc | adapter local_ipc AIP | E27 | held |
| I-ADAPTER-AIP-mcp | adapter mcp AIP | E27 | held |
| I-ADAPTER-AIP-message_queue | adapter message_queue AIP | E27 | held |
| I-ADAPTER-AIP-shell | adapter shell AIP | E27 | held |
| I-ADAPTER-AIP-websocket | adapter websocket AIP | E27 | held |
| E28-I33 | a key already bound to an identity cannot register again (clone) | E28 | held |
| E28-I35 | declaring an unregistered capability is refused | E28 | held |
| E28-I52 | an unknown delegation dimension is refused | E28 | held |
| E28-I53 | an omitted dimension is inherited, never widened | E28 | held |
| E28-I54 | a parent without downstream delegation cannot delegate | E28 | held |
| E28-I55 | delegation beyond max depth is refused | E28 | held |
| E28-I56 | a child cannot outlive its parent | E28 | held |
| E28-I57 | a tampered delegation token is detected in the chain | E28 | held |
| E28-I58 | revoking a delegation revokes every descendant token | E28 | held |
| E28-I59 | the execution count bound is enforced | E28 | held |
| E28-I60 | the economic budget bound is enforced | E28 | held |
| E28-I61 | a region outside the grant is refused | E28 | held |
| E28-I62 | risk that is not measured is refused, not assumed low | E28 | held |
| E28-I76 | local authority is requested AND federated AND local sponsor AND home ceiling | E28 | held |
| E28-I79 | a revoked identity cannot renew its lease | E28 | held |
| E28-I80 | renewal re-signs against the current identity and policy | E28 | held |
| E28-I81 | the lease action budget is enforced | E28 | held |
| E28-I88 | the passport is signed and every section carries an epistemic label | E28 | held |
| E29-S-AUTHORIZE | a veto at AUTHORIZE aborts the transaction and no later stage runs | E29 | held |
| E30-STATE-AUTHORIZED | only the listed states reach AUTHORIZED, by the listed actor | E30 | held |
| E30-STATE-REVOKED | only the listed states reach REVOKED, by the listed actor | E30 | held |
| E31-AF-identity | changing identity breaks the proof-carrying action binding | E31 | held |
| E31-AF-capability | changing capability breaks the proof-carrying action binding | E31 | held |
| E31-AF-delegation | changing delegation breaks the proof-carrying action binding | E31 | held |
| E31-AF-authority | changing authority breaks the proof-carrying action binding | E31 | held |
| E31-FC-AUTHORIZATION_DENIED | failure class AUTHORIZATION_DENIED is assigned only from matching evidence | E31 | held |
| E31-FC-AUTHORIZATION_EXPIRED | failure class AUTHORIZATION_EXPIRED is assigned only from matching evidence | E31 | held |
| E31-FC-AUTHORIZATION_REVOKED | failure class AUTHORIZATION_REVOKED is assigned only from matching evidence | E31 | held |
| E31-FC-INSUFFICIENT_AUTHORITY | failure class INSUFFICIENT_AUTHORITY is assigned only from matching evidence | E31 | held |
| E31-FC-CAPABILITY_MISMATCH | failure class CAPABILITY_MISMATCH is assigned only from matching evidence | E31 | held |
| E31-FC-IDENTITY_FAILURE | failure class IDENTITY_FAILURE is assigned only from matching evidence | E31 | held |
| E31-HS-identity_capabilities | identity_capabilities: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-authentication_method | authentication_method: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-authorization_capabilities | authorization_capabilities: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-delegation_model | delegation_model: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-revocation_mechanism | revocation_mechanism: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-enforcement_boundary | enforcement_boundary: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-evidence_capabilities | evidence_capabilities: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-proof_format | proof_format: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-policy_model | policy_model: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-protocol_bindings | protocol_bindings: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-failure_behavior | failure_behavior: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-fail_closed | fail_closed: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-supported_guarantees | supported_guarantees: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-HS-unsupported_guarantees | unsupported_guarantees: a declaration alone never exceeds OBSERVED; probes decide | E31 | held |
| E31-XD-read | translating read never widens authority in domain B | E31 | held |
| E31-XD-list | translating list never widens authority in domain B | E31 | held |
| E31-XD-query | translating query never widens authority in domain B | E31 | held |
| E31-XD-observe | translating observe never widens authority in domain B | E31 | held |
| E31-XD-notify | translating notify never widens authority in domain B | E31 | held |
| E31-XD-write | translating write never widens authority in domain B | E31 | held |
| E31-XD-create | translating create never widens authority in domain B | E31 | held |
| E31-XD-send | translating send never widens authority in domain B | E31 | held |
| E31-XD-submit | translating submit never widens authority in domain B | E31 | held |
| E31-XD-execute | translating execute never widens authority in domain B | E31 | held |
| E31-XD-configure | translating configure never widens authority in domain B | E31 | held |
| E31-RR-gate_replay | replay/revocation: gate_replay on every protocol | E31 | held |
| E31-RR-identity_revoked | replay/revocation: identity_revoked on every protocol | E31 | held |
| E31-RR-proof_revoked | replay/revocation: proof_revoked on every protocol | E31 | held |
| E31-RR-expired | replay/revocation: expired on every protocol | E31 | held |
| E31-RR-superseded | replay/revocation: superseded on every protocol | E31 | held |
| E31-RR-past_proof_future_action | replay/revocation: past_proof_future_action on every protocol | E31 | held |
| E31-RR-proof_for_other_action | replay/revocation: proof_for_other_action on every protocol | E31 | held |
| E31-RR-quarantined | replay/revocation: quarantined on every protocol | E31 | held |
| E31-RR-known_then_vs_now | replay/revocation: known_then_vs_now on every protocol | E31 | held |
| E31-AL-confidence | confidence creates no authority on any protocol | E31 | held |
| E31-AL-consensus | consensus creates no authority on any protocol | E31 | held |
| E31-AL-reputation | reputation creates no authority on any protocol | E31 | held |
| E31-AL-prediction | prediction creates no authority on any protocol | E31 | held |
| E31-AL-simulation | simulation creates no authority on any protocol | E31 | held |
| E31-AL-reward | reward creates no authority on any protocol | E31 | held |
| E31-AL-prior_success | prior_success creates no authority on any protocol | E31 | held |
| E31-AL-governance_proof | governance_proof creates no authority on any protocol | E31 | held |
| E32-CFG-deny_prefixes | adding a deny_prefixes restriction is never authority drift | E32 | held |
| E32-CFG-secret_patterns | adding a secret_patterns restriction is never authority drift | E32 | held |
| E32-CFG-rate_limit | adding a rate_limit restriction is never authority drift | E32 | held |
| E32-CFG-world_model_gate | adding a world_model_gate restriction is never authority drift | E32 | held |
| E32-PROT-evaluator | evaluator is outside what learning may change | E32 | held |
| E32-PROT-hidden_evaluation | hidden_evaluation is outside what learning may change | E32 | held |
| E32-PROT-verifier | verifier is outside what learning may change | E32 | held |
| E32-PROT-rollback | rollback is outside what learning may change | E32 | held |
| E32-PROT-trust_root | trust_root is outside what learning may change | E32 | held |
| E32-PROT-evidence | evidence is outside what learning may change | E32 | held |
| E32-PROT-e8 | e8 is outside what learning may change | E32 | held |
| E32-PROT-sandbox_policy | sandbox_policy is outside what learning may change | E32 | held |
| E32-PROT-promotion_gate | promotion_gate is outside what learning may change | E32 | held |
| E32-PROT-authority | authority is outside what learning may change | E32 | held |
| E32-PROT-self_reference_firewall | self_reference_firewall is outside what learning may change | E32 | held |
| E32-PROT-meta_governance | meta_governance is outside what learning may change | E32 | held |
| E32-PROT-loop_policy | loop_policy is outside what learning may change | E32 | held |
Other niches
Consensus & distributed systems · Attacks, threats & containment · Evidence, receipts & proofs · Memory, data & privacy · Prediction, world models & simulation · Transactions, markets & economics · Tools, MCP, protocols & adapters · Autonomy, control loops & recovery · Policy, law & governance · Trust & reputation · Supply chain, registry & lifecycle · Benchmarks, coverage & performance · Core guarantees
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem