CAIN-42 CAIN StudioEvidence library · niche
Identity, authority & delegation
Who an agent is, what it may do, and who allowed it. 964 tested invariants.
Last reviewed 2026-10-01
964 of 964 held
Test families in this niche
capability (54) · handshake (54) · authorization_binding (49) · aip (48) · revocation (26) · credential (25) · domain (21) · service_passport (21) · non_authority (18) · binding (16) · lease_v2 (15) · protected_key (14) · research (13) · state_machine (11) · cross_domain (11) · delegation (11) · kernel (11) · delegation_attenuation (9) · replay_revocation (9) · moat (9) · risk (6) · failure_class (6) · root_of_trust (6) · telemetry (5) · action (5) · action_binding (4) · config_key (4) · knowledge_revocation (4) · primitive (4) · agency_graph (4) · relationship (4) · delegation_receipt (3) · reassessment (3) · capability_passport (3) · authority_graph (3) · integrity (3) · consistency (3) · soc (3) · lease (3) · operation_kind (3) · event_kind (3) · exhaustion_mode (3) · gap_detector (3) · profile (3) · graph (3) · approval (2) · offline (2) · registration (2) · scientist (2) · radar (2) · federation (1) · intent (1) · tenancy (1) · cross-domain (1) · passport (1) · stage (1) · operation_state (1) · status (1) · environment_query (1) · ip (1) · competitive_gap (1) · authority_algebra (1) · minimum_authority (1) · systemic (1)
Where these come from
- CAIN-42 Evolution 24 -- Governed Agentic Internet Fabric: 198
- CAIN-42 Evolution 25 -- Universal Machine Agency Fabric: 105
- CAIN-42 Evolution 26 -- Universal Machine Agency Trust Fabric: 90
- CAIN-42 Evolution 23 -- Governed Meta-Intelligence Fabric: 84
- CAIN-42 Evolution 27 -- Agentic Internet Control Plane: 64
- CAIN-42 Evolution 31 -- Universal Proof-of-Governance Fabric: 52
- CAIN-42 Evolution 33 -- Governed Agentic Operating Fabric: 49
- CAIN-42 Evolution 36 -- Machine Agency Exchange Fabric: 49
- CAIN-42 Evolution 19 -- Governed Autonomy Operating Fabric: 43
- CAIN-42 Evolution 21 -- Governed Open-Ended Intelligence Fabric: 40
- CAIN-42 Evolution 20 -- Governed Agentic Civilization Fabric: 36
- CAIN-42 Evolution 32 -- Governed Autonomy Learning Fabric: 34
- CAIN-42 Evolution 41 -- Machine Agency Exchange Fabric: 28
- CAIN-42 Evolution 42 -- Supreme Governed Agentic Infrastructure Platform: 24
- CAIN-42 Evolution 35 -- Continuous Governance Intelligence Fabric: 21
- CAIN-42 Evolution 34 -- Proof-Carrying Machine Agency: 20
- CAIN-42 Evolution 28 -- Portable Machine Agency & Execution Identity: 18
- CAIN-42 Evolution 30 -- Governed Machine Autonomy Fabric: 2
- CAIN-42 Evolution 37 -- Autonomous Execution Mesh: 2
- CAIN-42 Evolution 38 -- Portable Proof-Carrying Machine Agency: 2
- CAIN-42 Evolution 29 -- Governed Agentic Internet Transaction Fabric: 1
- CAIN-42 Evolution 39 -- Governed Agent Factory: 1
- CAIN-42 Evolution 40 -- Autonomous Enterprise Intelligence Fabric: 1
Rules 901–964 of 964
| ID | Rule | Bundle | Result |
|---|---|---|---|
| E36-DOMAIN2-SERVICE-IDENTITY | domain SERVICE-IDENTITY is a signed E36 domain | E36 | held |
| E36-DOMAIN2-SERVICE-PASSPORT | domain SERVICE-PASSPORT is a signed E36 domain | E36 | held |
| E36-DOMAIN2-CAPABILITY | domain CAPABILITY is a signed E36 domain | E36 | held |
| E36-DOMAIN2-PAYMENT-AUTHORIZATION | domain PAYMENT-AUTHORIZATION is a signed E36 domain | E36 | held |
| E36-DOMAIN2-REVOCATION | domain REVOCATION is a signed E36 domain | E36 | held |
| E36-MOAT2-machine_service_passports | moat machine_service_passports states its evidence and is not a market moat | E36 | held |
| authority_algebra | every 'authority algebra' invariant in this bundle (9 of 9 held) | E37 | held |
| credential | every 'credential' invariant in this bundle (3 of 3 held) | E37 | held |
| handshake | every 'handshake' invariant in this bundle (5 of 5 held) | E38 | held |
| revocation | every 'revocation' invariant in this bundle (23 of 23 held) | E38 | held |
| minimum_authority | every 'minimum authority' invariant in this bundle (42 of 42 held) | E39 | held |
| E40-DOMAIN-AUTHORITY | signed domain AUTHORITY exists | E40 | held |
| E41-DOMAIN-HANDSHAKE-V3 | signed domain HANDSHAKE-V3 exists | E41 | held |
| E41-DOMAIN-WORK-LEASE | signed domain WORK-LEASE exists | E41 | held |
| E41-DOMAIN-AUTHORITY-TRANSLATION | signed domain AUTHORITY-TRANSLATION exists | E41 | held |
| E41-DOMAIN-REVOCATION | signed domain REVOCATION exists | E41 | held |
| E41-RELSTATE-AUTHORIZED | relationship state AUTHORIZED exists and is never collapsed | E41 | held |
| E41-RELSTATE-REVOKED | relationship state REVOKED exists and is never collapsed | E41 | held |
| E41-HANDSHAKE-IDENTITY | handshake step IDENTITY is required | E41 | held |
| E41-HANDSHAKE-CAPABILITY | handshake step CAPABILITY is required | E41 | held |
| E41-HANDSHAKE-AUTHORITY | handshake step AUTHORITY is required | E41 | held |
| E41-HANDSHAKE-POLICY | handshake step POLICY is required | E41 | held |
| E41-HANDSHAKE-EVIDENCE | handshake step EVIDENCE is required | E41 | held |
| E41-HANDSHAKE-ENFORCEMENT | handshake step ENFORCEMENT is required | E41 | held |
| E41-HANDSHAKE-PROOF | handshake step PROOF is required | E41 | held |
| E41-HANDSHAKE-REVOCATION | handshake step REVOCATION is required | E41 | held |
| E41-HANDSHAKE-RECOVERY | handshake step RECOVERY is required | E41 | held |
| E41-BOUNDARY-authority | systemic risk reports the authority boundary | E41 | held |
| E41-REL2-AUTHORIZED | relationship state AUTHORIZED is reachable/held or explicitly refused | E41 | held |
| E41-REL2-REVOKED | relationship state REVOKED is reachable/held or explicitly refused | E41 | held |
| E41-HS2-IDENTITY | handshake step IDENTITY cannot be omitted | E41 | held |
| E41-HS2-CAPABILITY | handshake step CAPABILITY cannot be omitted | E41 | held |
| E41-HS2-AUTHORITY | handshake step AUTHORITY cannot be omitted | E41 | held |
| E41-HS2-POLICY | handshake step POLICY cannot be omitted | E41 | held |
| E41-HS2-EVIDENCE | handshake step EVIDENCE cannot be omitted | E41 | held |
| E41-HS2-ENFORCEMENT | handshake step ENFORCEMENT cannot be omitted | E41 | held |
| E41-HS2-PROOF | handshake step PROOF cannot be omitted | E41 | held |
| E41-HS2-REVOCATION | handshake step REVOCATION cannot be omitted | E41 | held |
| E41-HS2-RECOVERY | handshake step RECOVERY cannot be omitted | E41 | held |
| E41-DOM41-revocation | exchange area revocation is covered by held scenarios | E41 | held |
| E42-DOMAIN-IDENTITY | signed domain IDENTITY exists | E42 | held |
| E42-DOMAIN-AUTHORITY | signed domain AUTHORITY exists | E42 | held |
| E42-DOMAIN-CAPABILITY | signed domain CAPABILITY exists | E42 | held |
| E42-DOMAIN-AUTHORIZATION | signed domain AUTHORIZATION exists | E42 | held |
| E42-DOMAIN-REVOCATION | signed domain REVOCATION exists | E42 | held |
| E42-AUTHPATH-IDENTITY | canonical authorization stage IDENTITY exists | E42 | held |
| E42-AUTHPATH-CAPABILITY | canonical authorization stage CAPABILITY exists | E42 | held |
| E42-AUTHPATH-TRUST | canonical authorization stage TRUST exists | E42 | held |
| E42-AUTHPATH-POLICY | canonical authorization stage POLICY exists | E42 | held |
| E42-AUTHPATH-AUTHORITY | canonical authorization stage AUTHORITY exists | E42 | held |
| E42-AUTHPATH-RISK | canonical authorization stage RISK exists | E42 | held |
| E42-AUTHPATH-CONSEQUENCE | canonical authorization stage CONSEQUENCE exists | E42 | held |
| E42-AUTHPATH-TRAJECTORY | canonical authorization stage TRAJECTORY exists | E42 | held |
| E42-AUTHPATH-DECISION | canonical authorization stage DECISION exists | E42 | held |
| E42-AUTHPATH-E8_COMMIT | canonical authorization stage E8_COMMIT exists | E42 | held |
| E42-AUTHPATH-ENFORCEMENT | canonical authorization stage ENFORCEMENT exists | E42 | held |
| E42-SURFACE-delegation | universal action surface delegation is covered | E42 | held |
| E42-GRAPH-identity | unified graph node kind identity exists | E42 | held |
| E42-GRAPH-authority | unified graph node kind authority exists | E42 | held |
| E42-GRAPH-capability | unified graph node kind capability exists | E42 | held |
| E42-ACTIONFIELD-principal | a universal action requires principal | E42 | held |
| E42-ACTIONFIELD-capability | a universal action requires capability | E42 | held |
| E42-ACTIONFIELD-delegation | a universal action requires delegation | E42 | held |
| E42-ACTIONFIELD-authority | a universal action requires authority | E42 | held |
Other niches
Consensus & distributed systems · Attacks, threats & containment · Evidence, receipts & proofs · Memory, data & privacy · Prediction, world models & simulation · Transactions, markets & economics · Tools, MCP, protocols & adapters · Autonomy, control loops & recovery · Policy, law & governance · Trust & reputation · Supply chain, registry & lifecycle · Benchmarks, coverage & performance · Core guarantees
Try CAIN-42 on your own agents
Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.
Create a free account → · Try the sandbox · See the whole ecosystem