CAIN-42 CAIN Studio

Evidence library · niche

Policy, law & governance

The rules agents must follow, and how they are enforced. 966 tested invariants.

Last reviewed 2026-10-01

966 of 966 held

Where this niche's rules come from

Test families in this niche

law (642) · conformance (65) · laws (36) · policy_distribution (32) · governance_cloud (24) · obligation (19) · governance_os (18) · enforcement_binding (13) · out_of_band (8) · policy_hierarchy (8) · policy_translation (8) · meta_governance (8) · enforcement_layer (5) · moat (5) · ip (5) · scientist (4) · research_to_implementation (2) · environment_query (2) · swarm (2) · action (2) · state_machine (1) · risk (1) · translation (1) · reassessment (1) · integrity (1) · swe (1) · telemetry (1) · consistency (1) · soc (1) · operation_state (1) · gap_detector (1) · fabric_component (1) · profile (1) · lab (1) · match (1) · policy_compiler (1) · f2t (1) · graph (1)

Where these come from

Rules 1–150 of 966

IDRuleBundleResult
G40every action has policy bindingE19held
G46governance state transitions are auditableE19held
G56autonomous mission termination is enforceableE19held
G64governance failure fails closedE19held
G83no bypassable governance path may be labeled enforcedE19held
G86governance root cannot silently mutateE19held
G87constitutional mutation requires governed transitionE19held
I12agent spawning cannot bypass governanceE20held
I20institution federation cannot bypass policyE20held
I50institutional dissolution is enforceableE20held
I69governed constitutional mutation worksE20held
I102the constitution cannot be silently modifiedE20held
D51governance failures fail closedE21held
D66no private reasoning is required for governance verificationE21held
D110a governance weakness can only be disclosedE21held
D132experiments forbid governance bypassE21held
D149the E21 laws and constitution are presentE21held
META-I024unknown governance path cannot become safeE23held
META-I026objective change requires governanceE23held
META-I027evaluation change requires governanceE23held
META-I028policy change requires governanceE23held
META-I030execution-path change requires governanceE23held
META-I041higher intelligence cannot bypass policyE23held
META-I042higher accuracy cannot bypass policyE23held
META-I043higher confidence cannot bypass policyE23held
META-I044lower latency cannot bypass policyE23held
META-I045lower cost cannot bypass policyE23held
META-I078the E23 constitution has 25 numbered lawsE23held
META-L007META-007 OPTIMIZATION IS NOT GOVERNANCEE23held
META-L017META-017 LOWER LATENCY MUST NOT JUSTIFY GOVERNANCE BYPASSE23held
META-L018META-018 HIGHER ACCURACY MUST NOT JUSTIFY GOVERNANCE BYPASSE23held
META-B-second_verifierlegitimate mutation 'second_verifier' stays eligible (governance does not block improvement)E23held
META-B-better_retrievallegitimate mutation 'better_retrieval' stays eligible (governance does not block improvement)E23held
META-B-better_plannerlegitimate mutation 'better_planner' stays eligible (governance does not block improvement)E23held
META-B-pin_versionslegitimate mutation 'pin_versions' stays eligible (governance does not block improvement)E23held
META-S-dim-execution_enforcementgovernability dimension 'execution_enforcement' drops when its property is violatedE23held
META-S-dim-policy_compliancegovernability dimension 'policy_compliance' drops when its property is violatedE23held
META-S-objective-constraintsthe objective carries every hard governance constraintE23held
NET-I064the network has 20 constitutional lawsE24held
NET-S-policy-rollbacka rolled-back policy is refusedE24held
I-TX-POLICY_EVALUATEDCREATED->POLICY_EVALUATED refusedE25held
I-TRANS-nopolicyno policy is UNKNOWNE26held
I-OOB-sandbox_supervisor-unenforcedsandbox_supervisor without enforcer UNENFORCEDE26held
I-OOB-sidecar-unenforcedsidecar without enforcer UNENFORCEDE26held
I-OOB-kernel-unenforcedkernel without enforcer UNENFORCEDE26held
I-OOB-network_proxy-unenforcednetwork_proxy without enforcer UNENFORCEDE26held
I-OOB-dpu-unenforceddpu without enforcer UNENFORCEDE26held
I-OOB-enclave-unenforcedenclave without enforcer UNENFORCEDE26held
I-OOB-cloud_policy-unenforcedcloud_policy without enforcer UNENFORCEDE26held
I-OOB-kernelregistered enforcer ENFORCEDE26held
I-REASSESS-policy_changetrigger policy_changeE26held
I-POLDIST-gateway-publishpublish role gatewayE27held
I-POLDIST-gateway-acceptaccept role gatewayE27held
I-POLDIST-gateway-downgradedowngrade refused role gatewayE27held
I-POLDIST-agent-publishpublish role agentE27held
I-POLDIST-agent-acceptaccept role agentE27held
I-POLDIST-agent-downgradedowngrade refused role agentE27held
I-POLDIST-runtime-publishpublish role runtimeE27held
I-POLDIST-runtime-acceptaccept role runtimeE27held
I-POLDIST-runtime-downgradedowngrade refused role runtimeE27held
I-POLDIST-mcp_server-publishpublish role mcp_serverE27held
I-POLDIST-mcp_server-acceptaccept role mcp_serverE27held
I-POLDIST-mcp_server-downgradedowngrade refused role mcp_serverE27held
I-POLDIST-a2a_endpoint-publishpublish role a2a_endpointE27held
I-POLDIST-a2a_endpoint-acceptaccept role a2a_endpointE27held
I-POLDIST-a2a_endpoint-downgradedowngrade refused role a2a_endpointE27held
I-POLDIST-organization-publishpublish role organizationE27held
I-POLDIST-organization-acceptaccept role organizationE27held
I-POLDIST-organization-downgradedowngrade refused role organizationE27held
I-POLDIST-trust_domain-publishpublish role trust_domainE27held
I-POLDIST-trust_domain-acceptaccept role trust_domainE27held
I-POLDIST-trust_domain-downgradedowngrade refused role trust_domainE27held
I-POLDIST-edge_node-publishpublish role edge_nodeE27held
I-POLDIST-edge_node-acceptaccept role edge_nodeE27held
I-POLDIST-edge_node-downgradedowngrade refused role edge_nodeE27held
I-SWE-boundaryagent cannot modify its own governance boundaryE27held
I-TELEM-policytelemetry policyE27held
I-HIER-GLOBALlevel GLOBALE27held
I-HIER-ORGANIZATIONlevel ORGANIZATIONE27held
I-HIER-BUSINESS_UNITlevel BUSINESS_UNITE27held
I-HIER-TEAMlevel TEAME27held
I-HIER-AGENTlevel AGENTE27held
I-HIER-INSTANCElevel INSTANCEE27held
I-HIER-TRANSACTIONlevel TRANSACTIONE27held
I-HIER-restrictspecific only restrictsE27held
I-CONSIST-policyconsistency policyE27held
I-AIC-identity_bindingaic identity_bindingE27held
I-AIC-request_bindingaic request_bindingE27held
I-AIC-authority_bindingaic authority_bindingE27held
I-AIC-delegation_securityaic delegation_securityE27held
I-AIC-capability_restrictionsaic capability_restrictionsE27held
I-AIC-replay_resistanceaic replay_resistanceE27held
I-AIC-revocationaic revocationE27held
I-AIC-model_substitutionaic model_substitutionE27held
I-AIC-runtime_substitutionaic runtime_substitutionE27held
I-AIC-identity_continuityaic identity_continuityE27held
I-AIC-execution_receiptsaic execution_receiptsE27held
I-AIC-evidence_integrityaic evidence_integrityE27held
I-AIC-policy_enforcementaic policy_enforcementE27held
I-AIC-mcp_enforcementaic mcp_enforcementE27held
I-AIC-a2a_governanceaic a2a_governanceE27held
I-AIC-computer_use_governanceaic computer_use_governanceE27held
I-AIC-subagent_governanceaic subagent_governanceE27held
I-SOC-policy_changesfeed policy_changesE27held
I-POLDIST-gateway-convergeconverge role gatewayE27held
I-POLDIST-agent-convergeconverge role agentE27held
I-POLDIST-runtime-convergeconverge role runtimeE27held
I-POLDIST-mcp_server-convergeconverge role mcp_serverE27held
I-POLDIST-a2a_endpoint-convergeconverge role a2a_endpointE27held
I-POLDIST-organization-convergeconverge role organizationE27held
I-POLDIST-trust_domain-convergeconverge role trust_domainE27held
I-POLDIST-edge_node-convergeconverge role edge_nodeE27held
I-NONAUTH-discoverydiscovery is not an authority inputE27held
I-NONAUTH-routingrouting is not an authority inputE27held
I-NONAUTH-contractcontract is not an authority inputE27held
I-NONAUTH-negotiationnegotiation is not an authority inputE27held
I-NONAUTH-consensusconsensus is not an authority inputE27held
I-NONAUTH-confidenceconfidence is not an authority inputE27held
I-NONAUTH-predictionprediction is not an authority inputE27held
I-NONAUTH-simulationsimulation is not an authority inputE27held
I-NONAUTH-memorymemory is not an authority inputE27held
I-NONAUTH-reputationreputation is not an authority inputE27held
I-NONAUTH-rewardreward is not an authority inputE27held
I-NONAUTH-computecompute is not an authority inputE27held
I-NONAUTH-research_evidenceresearch_evidence is not an authority inputE27held
I-NONAUTH-self_assessmentself_assessment is not an authority inputE27held
I-NONAUTH-capability_claimcapability_claim is not an authority inputE27held
I-NONAUTH-trust_scoretrust_score is not an authority inputE27held
I-LAW-AIP-L01law AIP-L01E27held
I-LAW-AIP-L02law AIP-L02E27held
I-LAW-AIP-L03law AIP-L03E27held
I-LAW-AIP-L04law AIP-L04E27held
I-LAW-AIP-L05law AIP-L05E27held
I-LAW-AIP-L06law AIP-L06E27held
I-LAW-AIP-L07law AIP-L07E27held
I-LAW-AIP-L08law AIP-L08E27held
I-LAW-AIP-L09law AIP-L09E27held
I-LAW-AIP-L10law AIP-L10E27held
I-LAW-AIP-L11law AIP-L11E27held
I-LAW-AIP-L12law AIP-L12E27held
I-LAW-AIP-L13law AIP-L13E27held
I-LAW-AIP-L14law AIP-L14E27held
I-LAW-AIP-L15law AIP-L15E27held
I-LAW-AIP-L16law AIP-L16E27held
I-LAW-AIP-L17law AIP-L17E27held
I-LAW-AIP-L18law AIP-L18E27held
I-LAW-AIP-L19law AIP-L19E27held
I-LAW-AIP-L20law AIP-L20E27held
E28-I1portable identity does not imply portable authorityE28held
E28-I2delegated authority never exceeds parent authority (16 dimensions)E28held

1 2 3 4 5 6 7

Other niches

Consensus & distributed systems · Attacks, threats & containment · Identity, authority & delegation · Evidence, receipts & proofs · Memory, data & privacy · Prediction, world models & simulation · Transactions, markets & economics · Tools, MCP, protocols & adapters · Autonomy, control loops & recovery · Trust & reputation · Supply chain, registry & lifecycle · Benchmarks, coverage & performance · Core guarantees

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account →  ·  Try the sandbox  ·  See the whole ecosystem