CAIN-42 CAIN Studio

Evidence library · niche

Policy, law & governance

The rules agents must follow, and how they are enforced. 966 tested invariants.

Last reviewed 2026-10-01

966 of 966 held

Where this niche's rules come from

Test families in this niche

law (642) · conformance (65) · laws (36) · policy_distribution (32) · governance_cloud (24) · obligation (19) · governance_os (18) · enforcement_binding (13) · out_of_band (8) · policy_hierarchy (8) · policy_translation (8) · meta_governance (8) · enforcement_layer (5) · moat (5) · ip (5) · scientist (4) · research_to_implementation (2) · environment_query (2) · swarm (2) · action (2) · state_machine (1) · risk (1) · translation (1) · reassessment (1) · integrity (1) · swe (1) · telemetry (1) · consistency (1) · soc (1) · operation_state (1) · gap_detector (1) · fabric_component (1) · profile (1) · lab (1) · match (1) · policy_compiler (1) · f2t (1) · graph (1)

Where these come from

Rules 451–600 of 966

IDRuleBundleResult
E34-LEVEL-G4level G4 means ENFORCEDE34held
E34-LEVEL-G5level G5 means PROOF-CARRYINGE34held
E34-LEVEL-G6level G6 means INDEPENDENTLY VERIFIABLEE34held
E34-LEVEL-G7level G7 means FEDERATED GOVERNANCEE34held
E34-CLOUD-identitycloud service identity is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-trustcloud service trust is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-policycloud service policy is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-evidencecloud service evidence is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-proofcloud service proof is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-conformancecloud service conformance is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-incidentcloud service incident is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-analyticscloud service analytics is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-learningcloud service learning is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-federationcloud service federation is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-marketplacecloud service marketplace is architecture only (NOT DEPLOYED)E34held
E34-CLOUD-researchcloud service research is architecture only (NOT DEPLOYED)E34held
E34-LAW2-E34-L1law E34-L1 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L2law E34-L2 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L3law E34-L3 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L4law E34-L4 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L5law E34-L5 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L6law E34-L6 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L7law E34-L7 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L8law E34-L8 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L9law E34-L9 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L10law E34-L10 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L11law E34-L11 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L12law E34-L12 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L13law E34-L13 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L14law E34-L14 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L15law E34-L15 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L16law E34-L16 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L17law E34-L17 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L18law E34-L18 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L19law E34-L19 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L20law E34-L20 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L21law E34-L21 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L22law E34-L22 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L23law E34-L23 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L24law E34-L24 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L25law E34-L25 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L26law E34-L26 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L27law E34-L27 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L28law E34-L28 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L29law E34-L29 is mapped to at least one held bench scenarioE34held
E34-LAW2-E34-L30law E34-L30 is mapped to at least one held bench scenarioE34held
E35-L1intelligence is not authorityE35held
E35-L2prediction is not authorityE35held
E35-L3risk score is not authorityE35held
E35-L4model confidence is not authorityE35held
E35-L5reputation is not authorityE35held
E35-L6historical success is not authorityE35held
E35-L7learned policy is not authorityE35held
E35-L8optimized policy is not authorityE35held
E35-L9collective consensus is not authorityE35held
E35-L10world model is not realityE35held
E35-L11simulation is not realityE35held
E35-L12counterfactual is not realityE35held
E35-L13recommendation is not authorizationE35held
E35-L14proof is not authorityE35held
E35-L15only the authorization path may authorizeE35held
E35-L16intelligence may not bypass E8E35held
E35-L17a learned recommendation never becomes production policy on its ownE35held
E35-L18AMBIGUITY != PERMISSIONE35held
E35-L19correlation is not proof of collusionE35held
E35-L20a benchmark score cannot override a governance failureE35held
E35-L21no single learned component controls all rootsE35held
E35-L22degradation never increases authorityE35held
E35-L23self-healing may not self-authorizeE35held
E35-L24memory may not create authorityE35held
E35-L25stale knowledge may not keep influencing governanceE35held
E35-L26a red team receives no unrestricted production authorityE35held
E35-L27an agent may not silently replace the user goalE35held
E35-L28counterfactual outcomes are never observed factsE35held
E35-L29prediction is never incident factE35held
E35-L30unknown remains unknownE35held
E35-LAW2-E35-L1law E35-L1 maps to held scenariosE35held
E35-LAW2-E35-L2law E35-L2 maps to held scenariosE35held
E35-LAW2-E35-L3law E35-L3 maps to held scenariosE35held
E35-LAW2-E35-L4law E35-L4 maps to held scenariosE35held
E35-LAW2-E35-L5law E35-L5 maps to held scenariosE35held
E35-LAW2-E35-L6law E35-L6 maps to held scenariosE35held
E35-LAW2-E35-L7law E35-L7 maps to held scenariosE35held
E35-LAW2-E35-L8law E35-L8 maps to held scenariosE35held
E35-LAW2-E35-L9law E35-L9 maps to held scenariosE35held
E35-LAW2-E35-L10law E35-L10 maps to held scenariosE35held
E35-LAW2-E35-L11law E35-L11 maps to held scenariosE35held
E35-LAW2-E35-L12law E35-L12 maps to held scenariosE35held
E35-LAW2-E35-L13law E35-L13 maps to held scenariosE35held
E35-LAW2-E35-L14law E35-L14 maps to held scenariosE35held
E35-LAW2-E35-L15law E35-L15 maps to held scenariosE35held
E35-LAW2-E35-L16law E35-L16 maps to held scenariosE35held
E35-LAW2-E35-L17law E35-L17 maps to held scenariosE35held
E35-LAW2-E35-L18law E35-L18 maps to held scenariosE35held
E35-LAW2-E35-L19law E35-L19 maps to held scenariosE35held
E35-LAW2-E35-L20law E35-L20 maps to held scenariosE35held
E35-LAW2-E35-L21law E35-L21 maps to held scenariosE35held
E35-LAW2-E35-L22law E35-L22 maps to held scenariosE35held
E35-LAW2-E35-L23law E35-L23 maps to held scenariosE35held
E35-LAW2-E35-L24law E35-L24 maps to held scenariosE35held
E35-LAW2-E35-L25law E35-L25 maps to held scenariosE35held
E35-LAW2-E35-L26law E35-L26 maps to held scenariosE35held
E35-LAW2-E35-L27law E35-L27 maps to held scenariosE35held
E35-LAW2-E35-L28law E35-L28 maps to held scenariosE35held
E35-LAW2-E35-L29law E35-L29 maps to held scenariosE35held
E35-LAW2-E35-L30law E35-L30 maps to held scenariosE35held
E35-RISK-enforcementrisk dimension enforcement is separateE35held
E35-FABRIC-policy_optimizerthe intelligence fabric exposes policy_optimizerE35held
E35-QUERY-policy_changeenvironment query policy_change existsE35held
E35-QUERY-enforcement_latencyenvironment query enforcement_latency existsE35held
E35-MODAL-MUSTobligation modal MUST existsE35held
E35-MODAL-MUST_NOTobligation modal MUST_NOT existsE35held
E35-MODAL-MAYobligation modal MAY existsE35held
E35-MODAL-SHOULDobligation modal SHOULD existsE35held
E35-MODAL-SHOULD_NOTobligation modal SHOULD_NOT existsE35held
E35-MODAL-REQUIRE_APPROVALobligation modal REQUIRE_APPROVAL existsE35held
E35-MODAL-REQUIRE_EVIDENCEobligation modal REQUIRE_EVIDENCE existsE35held
E35-MODAL-REQUIRE_ESCALATIONobligation modal REQUIRE_ESCALATION existsE35held
E35-MODAL-REQUIRE_REVIEWobligation modal REQUIRE_REVIEW existsE35held
E35-MODAL-REQUIRE_REAUTHORIZATIONobligation modal REQUIRE_REAUTHORIZATION existsE35held
E35-MODAL-REQUIRE_ROLLBACKobligation modal REQUIRE_ROLLBACK existsE35held
E35-MODAL-REQUIRE_DISCLOSUREobligation modal REQUIRE_DISCLOSURE existsE35held
E35-OBLSTATE-CREATEDobligation state CREATED existsE35held
E35-OBLSTATE-ACTIVEobligation state ACTIVE existsE35held
E35-OBLSTATE-SATISFIEDobligation state SATISFIED existsE35held
E35-OBLSTATE-VIOLATEDobligation state VIOLATED existsE35held
E35-OBLSTATE-WAIVEDobligation state WAIVED existsE35held
E35-OBLSTATE-EXPIREDobligation state EXPIRED existsE35held
E35-OBLSTATE-UNKNOWNobligation state UNKNOWN existsE35held
E35-PROFILE-enforcement_coverageagentic profile dimension enforcement_coverage existsE35held
E35-IP-governance_coverageIP primitive governance_coverage existsE35held
E35-IP-machine_conformanceIP primitive machine_conformance existsE35held
E35-IP-governance_federationIP primitive governance_federation existsE35held
E35-IP-governance_intelligenceIP primitive governance_intelligence existsE35held
E35-IP-governance_state_revisionIP primitive governance_state_revision existsE35held
E35-SWARM-policyswarm role policy existsE35held
E35-SWARM-conformanceswarm role conformance existsE35held
E35-LAB-new_governance_failuresresearch-lab topic new_governance_failures existsE35held
E35-INTEGRITY-policyintegrity monitor watches policyE35held
E36-L1marketplace identity is not authorityE36held
E36-L2reputation is not authorityE36held
E36-L3a contract is not unrestricted authorityE36held
E36-L4a bid does not authorize executionE36held
E36-L5payment does not authorize executionE36held
E36-L6successful history does not authorize the futureE36held
E36-L7a subcontractor's authority cannot exceed its parent'sE36held
E36-L8service substitution requires revalidationE36held
E36-L9an expired contract cannot authorize an actionE36held
E36-L10a revoked service cannot continue on a stale authorizationE36held
E36-L11a proof cannot be reused for another transactionE36held

1 2 3 4 5 6 7

Other niches

Consensus & distributed systems · Attacks, threats & containment · Identity, authority & delegation · Evidence, receipts & proofs · Memory, data & privacy · Prediction, world models & simulation · Transactions, markets & economics · Tools, MCP, protocols & adapters · Autonomy, control loops & recovery · Trust & reputation · Supply chain, registry & lifecycle · Benchmarks, coverage & performance · Core guarantees

Try CAIN-42 on your own agents

Create a free account and every new account starts with a 7-day trial of the full platform. Or try the sandbox first, with no account at all.

Create a free account →  ·  Try the sandbox  ·  See the whole ecosystem