E20 governs agents, collectives and machine-native institutions: formation, membership, delegation, negotiation,
contracts, resources, spawning, termination, reputation, trust, federation, disputes, evolution and recovery.
Institutional authority is an intersection, never a sum; every consequential institutional action is judged by E20,
then by the E19 action-contract gate, and committed only by the E8 kernel. COLLECTIVE INTELLIGENCE IS NOT
INSTITUTIONAL AUTHORITY.
| ID | Invariant | Result |
|---|
| I1 | organization cannot create authority | HOLDS |
| I2 | institution cannot create authority | HOLDS |
| I3 | wealth cannot create authority | HOLDS |
| I4 | resources cannot create authority | HOLDS |
| I5 | reputation cannot create authority | HOLDS |
| I6 | membership cannot create authority | HOLDS |
| I7 | majority cannot create authority | HOLDS |
| I8 | consensus cannot create authority | HOLDS |
| I9 | negotiation cannot create authority | HOLDS |
| I10 | contract cannot exceed issuer authority | HOLDS |
| I11 | child agent cannot inherit unlimited authority | HOLDS |
| I12 | agent spawning cannot bypass governance | HOLDS |
| I13 | institutional memory cannot create authority | HOLDS |
| I14 | institutional reputation cannot create authority | HOLDS |
| I15 | organizational evolution cannot create authority | HOLDS |
| I16 | economic success cannot create authority | HOLDS |
| I17 | capability accumulation cannot create authority | HOLDS |
| I18 | trust propagation must remain bounded | HOLDS |
| I19 | delegation cannot exceed parent authority | HOLDS |
| I20 | institution federation cannot bypass policy | HOLDS |
| I21 | resources require provenance | HOLDS |
| I22 | contracts require provenance | HOLDS |
| I23 | memberships require provenance | HOLDS |
| I24 | authority relationships require provenance | HOLDS |
| I25 | institutional mutations require provenance | HOLDS |
| I26 | terminated authority cannot resurrect | HOLDS |
| I27 | dissolved institutions cannot execute | HOLDS |
| I28 | expired contracts cannot authorize | HOLDS |
| I29 | revoked relationships cannot authorize | HOLDS |
| I30 | revoked credentials cannot authorize | HOLDS |
| I31 | simulation cannot execute | HOLDS |
| I32 | counterfactual cannot execute | HOLDS |
| I33 | market simulation cannot create real transactions | HOLDS |
| I34 | reputation simulation cannot create trust | HOLDS |
| I35 | economic simulation cannot create authority | HOLDS |
| I36 | institutional goals inherit constraints | HOLDS |
| I37 | sub-organizations inherit constraints | HOLDS |
| I38 | child agents inherit bounded constraints | HOLDS |
| I39 | institutional emergency cannot create unlimited authority | HOLDS |
| I40 | institutional recovery cannot create authority | HOLDS |
| I41 | collusion detection is not certainty | HOLDS |
| I42 | reputation is evidence, not truth | HOLDS |
| I43 | trust is not authority | HOLDS |
| I44 | consensus is not authorization | HOLDS |
| I45 | capability is not permission | HOLDS |
| I46 | institutional autonomy is bounded | HOLDS |
| I47 | institutional state is auditable | HOLDS |
| I48 | institutional lineage is reconstructable | HOLDS |
| I49 | institutional evolution is governed | HOLDS |
| I50 | institutional dissolution is enforceable | HOLDS |
| I51 | UNKNOWN never silently becomes ALLOW | HOLDS |
| I52 | member authority is an intersection, never a sum | HOLDS |
| I53 | institution authority re-derives as boundary ∩ founding ∩ state ceiling ∩ parent | HOLDS |
| I54 | every consequential institutional action reaches E8 | HOLDS |
| I55 | a token never skips an E20 verdict | HOLDS |
| I56 | verdicts re-run after token issuance (TOCTOU) | HOLDS |
| I57 | E19 invalidation applies to institutional actions | HOLDS |
| I58 | institutional powers are not E8 operations | HOLDS |
| I59 | legitimate member action is authorized | HOLDS |
| I60 | legitimate sequential action is not replay | HOLDS |
| I61 | legitimate contract lifecycle works | HOLDS |
| I62 | legitimate economic settlement works and conserves | HOLDS |
| I63 | legitimate spawning works | HOLDS |
| I64 | legitimate delegation works | HOLDS |
| I65 | legitimate negotiation completes | HOLDS |
| I66 | legitimate recovery restores operation | HOLDS |
| I67 | narrowing needs no quorum | HOLDS |
| I68 | governed widening with quorum works | HOLDS |
| I69 | governed constitutional mutation works | HOLDS |
| I70 | governed dissolution works and is receipted | HOLDS |
| I71 | resources are conserved through every flow | HOLDS |
| I72 | the ledger rebuilds from its chain and discards unchained edits | HOLDS |
| I73 | double spend is impossible | HOLDS |
| I74 | escrow returns exactly once | HOLDS |
| I75 | termination is a governed cascade | HOLDS |
| I76 | termination receipts are signed | HOLDS |
| I77 | birth certificates bind every inherited dimension | HOLDS |
| I78 | each inheritance dimension is independently bounded | HOLDS |
| I79 | institutional history is append-only and hash-chained | HOLDS |
| I80 | memory, knowledge, evidence, policy and authority are separate | HOLDS |
| I81 | reputation decays | HOLDS |
| I82 | Sybil issuers count once | HOLDS |
| I83 | trust revocation is effective | HOLDS |
| I84 | circular validation is detected | HOLDS |
| I85 | absence of a collusion signal is UNKNOWN | HOLDS |
| I86 | the power engine is observational only | HOLDS |
| I87 | blast radius separates predicted, observed and unknown | HOLDS |
| I88 | dispute resolution never fabricates certainty | HOLDS |
| I89 | disputes preserve competing claims | HOLDS |
| I90 | a resolver is never a party | HOLDS |
| I91 | the audit reconstructs the institution | HOLDS |
| I92 | lineage verifies and detects tampering | HOLDS |
| I93 | a state fork needs governance | HOLDS |
| I94 | supply-chain substitution is detected per kind | HOLDS |
| I95 | capability injection is refused | HOLDS |
| I96 | the digital twin mirrors reality and never changes it | HOLDS |
| I97 | the institutional control loop is ordered | HOLDS |
| I98 | EXECUTE needs an AUTHORIZED decision | HOLDS |
| I99 | autonomy escalation needs evidence and, for AUTONOMOUS+, a quorum | HOLDS |
| I100 | authority contracts automatically on deterioration | HOLDS |
| I101 | assessment never raises autonomy | HOLDS |
| I102 | the constitution cannot be silently modified | HOLDS |
| I103 | append-only audit cannot be removed | HOLDS |
| I104 | the governance quorum excludes the proposer | HOLDS |
| I105 | approvals are subject-bound | HOLDS |
| I106 | cross-institution authority is re-checked against the grantor at use | HOLDS |
| I107 | competition grants nothing | HOLDS |
| I108 | market eligibility is computed authority | HOLDS |
| I109 | real-money settlement is refused everywhere | HOLDS |
| I110 | public claims map to evidence | HOLDS |
| I111 | full regression must not be bypassed | HOLDS |
| I112 | physical and societal control is not claimed | HOLDS |
| I113 | local tests do not equal multi-host verification | HOLDS |
| I114 | internal verification does not equal third-party verification | HOLDS |
| I115 | the verifier does not trust CAIN implementation | HOLDS |
| I116 | proof mirrors are byte-verifiable | HOLDS |
| I117 | evidence is independently hash-verifiable | HOLDS |
| I118 | the end-to-end scenario is deterministic | HOLDS |
| Attack | Category | Invariant | Result |
|---|
| acceptance_by_non_recipient | negotiation | I9 | CONTAINED |
| agent_delegation_exceeds_principal | membership | I19 | CONTAINED |
| agent_delegation_expired | membership | I28 | CONTAINED |
| agent_delegation_identity_mismatch | identity | I24 | CONTAINED |
| agent_delegation_other_agent | identity | I24 | CONTAINED |
| agent_impersonation | supply_chain | I23 | CONTAINED |
| agent_self_declared_authority | membership | I24 | CONTAINED |
| already_member | membership | I23 | CONTAINED |
| assess_cannot_raise | autonomy_state | I46 | CONTAINED |
| authority_concentration_flag | power | I47 | CONTAINED |
| balance_inflation | resources | I21 | CONTAINED |
| birth_certificate_forgery | agent_spawning | I48 | CONTAINED |
| blast_kind_unknown | blast_radius | I51 | CONTAINED |
| blast_labels | blast_radius | I41 | CONTAINED |
| capability_injection | supply_chain | I17 | CONTAINED |
| capability_is_not_permission | authority_laundering | I45 | CONTAINED |
| capability_not_executable | execution | I45 | CONTAINED |
| causal_inversion | temporal | I48 | CONTAINED |
| child_capability_exceeds_parent | agent_spawning | I38 | CONTAINED |
| child_drops_constraint | agent_spawning | I38 | CONTAINED |
| child_exceeds_parent | agent_spawning | I11 | CONTAINED |
| child_exceeds_policy | agent_spawning | I11 | CONTAINED |
| child_follows_parent_revocation | agent_spawning | I11 | CONTAINED |
| child_id_replay | agent_spawning | I12 | CONTAINED |
| child_mission_escalation | agent_spawning | I36 | CONTAINED |
| child_outlives_parent | agent_spawning | I38 | CONTAINED |
| child_resources_exceed_policy | agent_spawning | I38 | CONTAINED |
| child_resources_not_held | agent_spawning | I21 | CONTAINED |
| child_resurrection | agent_spawning | I26 | CONTAINED |
| child_ttl_exceeds | agent_spawning | I38 | CONTAINED |
| circular_validation | trust | I18 | CONTAINED |
| claim_replay | court | I47 | CONTAINED |
| claims_preserved | court | I47 | CONTAINED |
| collective_hallucination | memory | I42 | CONTAINED |
| collusion_reputation_signal | collusion | I41 | CONTAINED |
| collusive_attestation | trust | I41 | CONTAINED |
| collusive_reputation | reputation | I41 | CONTAINED |
| collusive_reward_ring | incentives | I41 | CONTAINED |
| competition_grants_nothing | cross_institution | I20 | CONTAINED |
| consensus_cannot_create_authority | authority_laundering | I8 | CONTAINED |
| constitution_drop_audit | constitution | I47 | CONTAINED |
| constitution_section_missing | formation | I47 | CONTAINED |
| constitution_silent_modification | constitution | I49 | CONTAINED |
| constitution_version_skip | constitution | I49 | CONTAINED |
| constitutional_takeover | constitution | I49 | CONTAINED |
| contained_recovery_requires_quorum | autonomy_state | I40 | CONTAINED |
| contract_binding_stale | contracts | I22 | CONTAINED |
| contract_collusion_signal | collusion | I41 | CONTAINED |
| contract_constitution_invalidation | contracts | I28 | CONTAINED |
| contract_counterparty_spoofed | contracts | I22 | CONTAINED |
| contract_does_not_cover | contracts | I10 | CONTAINED |
| contract_drops_constraint | contracts | I36 | CONTAINED |
| contract_duration | contracts | I10 | CONTAINED |
| contract_exceeds_issuer | contracts | I10 | CONTAINED |
| contract_expired | contracts | I28 | CONTAINED |
| contract_from_simulation | simulation | I31 | CONTAINED |
| contract_id_replay | contracts | I22 | CONTAINED |
| contract_is_not_authorization | contracts | I9 | CONTAINED |
| contract_issuer_lacks_power | contracts | I10 | CONTAINED |
| contract_laundering | contracts | I9 | CONTAINED |
| contract_member_not_party | contracts | I10 | CONTAINED |
| contract_not_bound_to_negotiation | contracts | I22 | CONTAINED |
| contract_not_yet_valid | temporal | I28 | CONTAINED |
| contract_one_signature | contracts | I22 | CONTAINED |
| contract_performer_revoked | contracts | I29 | CONTAINED |
| contract_real_money | economic | I33 | CONTAINED |
| contract_replay | contracts | I22 | CONTAINED |
| contract_resources_not_held | contracts | I21 | CONTAINED |
| contract_silent_modification | contracts | I22 | CONTAINED |
| contract_substitution | contracts | I22 | CONTAINED |
| contract_terminated_party | termination | I26 | CONTAINED |
| contract_value | contracts | I10 | CONTAINED |
| contract_value_no_authority | contracts | I10 | CONTAINED |
| contract_work_exceeds_contract_authority | contracts | I10 | CONTAINED |
| contract_world_invalidation | contracts | I28 | CONTAINED |
| contraction_on_compromise | autonomy_state | I46 | CONTAINED |
| contraction_on_risk | autonomy_state | I46 | CONTAINED |
| coordinated_behavior_signal | collusion | I41 | CONTAINED |
| counterfactual_not_executable | simulation | I32 | CONTAINED |
| counterparty_spoofing | negotiation | I24 | CONTAINED |
| credential_revoked_execution | identity | I30 | CONTAINED |
| credential_substitution | supply_chain | I30 | CONTAINED |
| cross_domain_escalation | cross_institution | I20 | CONTAINED |
| cross_institution_false_belief | memory | I13 | CONTAINED |
| dead_agent_children_cascade | resurrection | I26 | CONTAINED |
| dead_agent_executes | resurrection | I26 | CONTAINED |
| dead_agent_readmitted | resurrection | I26 | CONTAINED |
| dead_agent_reregisters | resurrection | I26 | CONTAINED |
| dead_agent_stale_delegation | resurrection | I26 | CONTAINED |
| dead_agent_stale_lease | resurrection | I26 | CONTAINED |
| dead_credential_reuse | resurrection | I30 | CONTAINED |
| decision_record_contradicts | memory | I13 | CONTAINED |
| degraded_limits_to_read | autonomy_state | I46 | CONTAINED |
| delegation_depth | delegation | I19 | CONTAINED |
| delegation_exceeds_delegator | delegation | I19 | CONTAINED |
| delegation_exceeds_parent_relationship | delegation | I19 | CONTAINED |
| delegation_expired | delegation | I28 | CONTAINED |
| delegation_loop_no_amplification | delegation | I19 | CONTAINED |
| delegation_resurrection | delegation | I29 | CONTAINED |
| delegation_revocation_cascade | delegation | I29 | CONTAINED |
| delegation_self_grant | delegation | I19 | CONTAINED |
| delegation_to_non_member | delegation | I19 | CONTAINED |
| delegation_wildcard | delegation | I19 | CONTAINED |
| delegation_without_power | delegation | I19 | CONTAINED |
| delegator_terminated | delegation | I26 | CONTAINED |
| dependency_substitution | supply_chain | I25 | CONTAINED |
| dissolution_self_approval | termination | I50 | CONTAINED |
| dissolution_without_quorum | termination | I50 | CONTAINED |
| dissolved_cannot_recover | termination | I27 | CONTAINED |
| dissolved_contracts_terminated | termination | I50 | CONTAINED |
| dissolved_executes | termination | I27 | CONTAINED |
| dissolved_institution_reformed | termination | I27 | CONTAINED |
| dissolved_is_terminal | autonomy_state | I27 | CONTAINED |
| dissolved_treasury_recovered | termination | I50 | CONTAINED |
| double_spend | resources | I21 | CONTAINED |
| econ_amount_invalid | economic | I21 | CONTAINED |
| econ_contained | economic | I46 | CONTAINED |
| econ_contract_budget | economic | I10 | CONTAINED |
| econ_contract_counterparty_mismatch | economic | I10 | CONTAINED |
| econ_contract_required | economic | I10 | CONTAINED |
| econ_counterparty_terminated | economic | I26 | CONTAINED |
| econ_counterparty_unknown | economic | I22 | CONTAINED |
| econ_identity_substitution | economic | I23 | CONTAINED |
| econ_institution_mismatch | economic | I23 | CONTAINED |
| econ_insufficient_balance | economic | I21 | CONTAINED |
| econ_mission_mismatch | economic | I36 | CONTAINED |
| econ_no_spend_authority | economic | I16 | CONTAINED |
| econ_policy_changed | economic | I22 | CONTAINED |
| econ_purpose_missing | economic | I22 | CONTAINED |
| econ_real_money | economic | I33 | CONTAINED |
| econ_replay | economic | I22 | CONTAINED |
| econ_risk_high | economic | I16 | CONTAINED |
| econ_risk_nan | economic | I51 | CONTAINED |
| econ_risk_unknown | economic | I51 | CONTAINED |
| econ_simulated_source | simulation | I35 | CONTAINED |
| econ_stale | economic | I28 | CONTAINED |
| emergency_duration | emergency | I39 | CONTAINED |
| emergency_narrows | emergency | I39 | CONTAINED |
| emergency_widening | emergency | I39 | CONTAINED |
| escalation_unknown_evidence | autonomy_state | I51 | CONTAINED |
| escalation_without_evidence | autonomy_state | I46 | CONTAINED |
| escalation_without_quorum | autonomy_state | I46 | CONTAINED |
| escrow_duplication | resources | I21 | CONTAINED |
| evidence_entry_without_evidence | memory | I42 | CONTAINED |
| evolution_exceeds_proposer | evolution | I15 | CONTAINED |
| evolution_stale_state | evolution | I49 | CONTAINED |
| evolution_unknown_role | evolution | I49 | CONTAINED |
| evolution_widening_without_quorum | evolution | I15 | CONTAINED |
| evolution_without_restructure | evolution | I49 | CONTAINED |
| expired_institution | temporal | I28 | CONTAINED |
| expired_membership_executes | membership | I28 | CONTAINED |
| fabricated_authorization_history | memory | I13 | CONTAINED |
| fabricated_certainty | court | I42 | CONTAINED |
| fake_reputation | reputation | I42 | CONTAINED |
| false_precedent | memory | I13 | CONTAINED |
| false_promise_authority_inflation | negotiation | I9 | CONTAINED |
| federation_join_without_power | federation | I20 | CONTAINED |
| federation_lacks_authority | federation | I20 | CONTAINED |
| federation_poisoning | federation | I20 | CONTAINED |
| federation_policy_bypass | federation | I20 | CONTAINED |
| federation_sybil_member | federation | I6 | CONTAINED |
| forged_token_other_key | execution | I24 | CONTAINED |
| founder_unknown | formation | I23 | CONTAINED |
| founding_grant_exceeds_principal | formation | I19 | CONTAINED |
| founding_grant_expired | formation | I28 | CONTAINED |
| founding_grant_forged | formation | I24 | CONTAINED |
| founding_grant_other_institution | formation | I24 | CONTAINED |
| founding_grant_replay | formation | I24 | CONTAINED |
| governance_root_other_subject | constitution | I49 | CONTAINED |
| group_cannot_union_authority | formation | I1 | CONTAINED |
| historical_rewrite | memory | I47 | CONTAINED |
| history_truncation | memory | I47 | CONTAINED |
| identity_kind_unknown | formation | I47 | CONTAINED |
| identity_substitution_at_execution | identity | I23 | CONTAINED |
| identity_unknown_power | formation | I2 | CONTAINED |
| identity_without_provenance | formation | I25 | CONTAINED |
| institution_born_autonomous | formation | I46 | CONTAINED |
| institution_id_replay | formation | I48 | CONTAINED |
| institution_risk_high | execution | I46 | CONTAINED |
| institution_risk_nan | execution | I51 | CONTAINED |
| institution_risk_unknown | execution | I51 | CONTAINED |
| institutional_reward_hacking | incentives | I16 | CONTAINED |
| lease_expiry | resources | I28 | CONTAINED |
| lease_revocation | resources | I29 | CONTAINED |
| ledger_history_rewrite | resources | I21 | CONTAINED |
| lineage_tamper | state_integrity | I47 | CONTAINED |
| loop_execute_without_authorization | control_loop | I47 | CONTAINED |
| loop_skip | control_loop | I49 | CONTAINED |
| loop_unknown_stage | control_loop | I49 | CONTAINED |
| majority_cannot_create_authority | authority_laundering | I7 | CONTAINED |
| market_above_reserve | market | I33 | CONTAINED |
| market_allocation_tampered | market | I33 | CONTAINED |
| market_bid_invalid | market | I33 | CONTAINED |
| market_contained_bidder | market | I46 | CONTAINED |
| market_double_settle | market | I33 | CONTAINED |
| market_duplicate_bid | market | I33 | CONTAINED |
| market_ineligible_bidder | market | I16 | CONTAINED |
| market_non_participant | market | I33 | CONTAINED |
| market_record_imported | simulation | I33 | CONTAINED |
| market_settlement_isolated | market | I33 | CONTAINED |
| market_simulation_source | simulation | I33 | CONTAINED |
| market_win_no_authority | market | I16 | CONTAINED |
| membership_grant_exceeds_sponsor | membership | I6 | CONTAINED |
| membership_identity_spoof | membership | I23 | CONTAINED |
| membership_takeover_limit | membership | I6 | CONTAINED |
| membership_without_provenance | membership | I23 | CONTAINED |
| memory_as_authority | memory | I13 | CONTAINED |
| memory_as_policy | memory | I13 | CONTAINED |
| memory_id_replay | memory | I47 | CONTAINED |
| memory_poisoning | memory | I13 | CONTAINED |
| memory_time_inversion | temporal | I47 | CONTAINED |
| memory_without_provenance | memory | I25 | CONTAINED |
| metric_manipulation | incentives | I41 | CONTAINED |
| mint_forged | resources | I21 | CONTAINED |
| mint_kind_not_authorized | resources | I21 | CONTAINED |
| mint_real_money | economic | I33 | CONTAINED |
| mint_replay | resources | I21 | CONTAINED |
| mint_unknown_issuer | resources | I21 | CONTAINED |
| mission_mutation_without_quorum | evolution | I49 | CONTAINED |
| model_intelligence_no_authority | authority_laundering | I17 | CONTAINED |
| model_poisoning | supply_chain | I25 | CONTAINED |
| nan_transfer | resources | I21 | CONTAINED |
| negative_transfer | resources | I21 | CONTAINED |
| negotiation_deadline_past | negotiation | I28 | CONTAINED |
| negotiation_fork | negotiation | I22 | CONTAINED |
| negotiation_non_party | negotiation | I9 | CONTAINED |
| negotiation_outcome_not_authorization | negotiation | I9 | CONTAINED |
| negotiation_replay | negotiation | I22 | CONTAINED |
| negotiation_round_limit | negotiation | I9 | CONTAINED |
| negotiation_without_power | negotiation | I9 | CONTAINED |
| nested_exceeds_parent | formation | I37 | CONTAINED |
| nested_outlives_parent | formation | I37 | CONTAINED |
| nested_under_contained_parent | formation | I37 | CONTAINED |
| nested_without_parent_authority | formation | I37 | CONTAINED |
| network_centrality_no_authority | power | I17 | CONTAINED |
| non_member_execution | identity | I6 | CONTAINED |
| non_party_claim | court | I47 | CONTAINED |
| offer_identity_substitution | negotiation | I23 | CONTAINED |
| offer_institution_substitution | negotiation | I23 | CONTAINED |
| overdraft | resources | I21 | CONTAINED |
| partial_execution | execution | I46 | CONTAINED |
| passport_expired | formation | I28 | CONTAINED |
| passport_forged | formation | I24 | CONTAINED |
| passport_identity_mismatch | formation | I48 | CONTAINED |
| physical_actuation_request | execution | I45 | CONTAINED |
| power_report_changes_nothing | power | I17 | CONTAINED |
| promise_resources_not_held | negotiation | I21 | CONTAINED |
| proxy_optimization | incentives | I16 | CONTAINED |
| publisher_substitution | supply_chain | I25 | CONTAINED |
| recovery_cannot_widen | recovery | I40 | CONTAINED |
| recovery_cause_unknown | recovery | I51 | CONTAINED |
| recovery_foreign_checkpoint | recovery | I40 | CONTAINED |
| recovery_forged_checkpoint | recovery | I40 | CONTAINED |
| recovery_stale_checkpoint | recovery | I40 | CONTAINED |
| recovery_to_degraded_only | recovery | I40 | CONTAINED |
| recovery_without_quorum | recovery | I40 | CONTAINED |
| relationship_exceeds_grantor | cross_institution | I20 | CONTAINED |
| relationship_expired | cross_institution | I29 | CONTAINED |
| relationship_grantor_contained | cross_institution | I20 | CONTAINED |
| relationship_replay | cross_institution | I29 | CONTAINED |
| relationship_revoked | cross_institution | I29 | CONTAINED |
| relationship_without_power | cross_institution | I20 | CONTAINED |
| reputation_cannot_create_authority | reputation | I5 | CONTAINED |
| reputation_delta_invalid | reputation | I42 | CONTAINED |
| reputation_evidence_reuse | reputation | I42 | CONTAINED |
| reputation_laundering_pseudonym | reputation | I42 | CONTAINED |
| reputation_replay | reputation | I42 | CONTAINED |
| resigned_contained | execution | I46 | CONTAINED |
| resigned_no_authority | execution | I6 | CONTAINED |
| resolution_grants_no_authority | court | I40 | CONTAINED |
| resolver_conflict | court | I47 | CONTAINED |
| resolver_without_power | court | I47 | CONTAINED |
| resource_capture_by_terminated | termination | I26 | CONTAINED |
| resource_cycling_signal | collusion | I41 | CONTAINED |
| resource_kind_unknown | resources | I21 | CONTAINED |
| resources_cannot_raise_ceiling | economic | I4 | CONTAINED |
| revoked_dependency | supply_chain | I29 | CONTAINED |
| revoked_member_executes | membership | I29 | CONTAINED |
| revoked_membership_resurrection | membership | I29 | CONTAINED |
| reward_above_cap | incentives | I16 | CONTAINED |
| reward_as_authority | incentives | I16 | CONTAINED |
| reward_nan | incentives | I51 | CONTAINED |
| reward_without_evidence | incentives | I42 | CONTAINED |
| role_escalation_without_quorum | evolution | I15 | CONTAINED |
| role_not_in_constitution | membership | I6 | CONTAINED |
| role_promise_exceeds | negotiation | I9 | CONTAINED |
| scope_laundering | negotiation | I9 | CONTAINED |
| self_escalation | evolution | I15 | CONTAINED |
| self_governance_unbounded | constitution | I46 | CONTAINED |
| self_issued_reputation | reputation | I14 | CONTAINED |
| self_issued_via_controller | reputation | I14 | CONTAINED |
| self_reported_metric | incentives | I16 | CONTAINED |
| self_trust | trust | I18 | CONTAINED |
| simulation_leakage_into_evidence | simulation | I32 | CONTAINED |
| single_point_dependency | power | I47 | CONTAINED |
| spawn_child_limit | agent_spawning | I12 | CONTAINED |
| spawn_creates_no_resources | agent_spawning | I21 | CONTAINED |
| spawn_depth | agent_spawning | I12 | CONTAINED |
| spawn_from_simulation | simulation | I31 | CONTAINED |
| spawn_in_contained_institution | agent_spawning | I46 | CONTAINED |
| spawn_without_power | agent_spawning | I12 | CONTAINED |
| spawning_explosion | agent_spawning | I12 | CONTAINED |
| sponsor_lacks_admit | membership | I6 | CONTAINED |
| stale_reputation_decays | reputation | I42 | CONTAINED |
| state_fork_adoption | state_integrity | I49 | CONTAINED |
| state_skip | autonomy_state | I46 | CONTAINED |
| supply_without_provenance | supply_chain | I25 | CONTAINED |
| sybil_agent_registration | membership | I6 | CONTAINED |
| sybil_founders | formation | I6 | CONTAINED |
| sybil_institutions | formation | I6 | CONTAINED |
| sybil_reputation | reputation | I42 | CONTAINED |
| termination_receipt_forgery | termination | I48 | CONTAINED |
| toctou_authority_narrowed | execution | I19 | CONTAINED |
| toctou_constitution_mutation | execution | I22 | CONTAINED |
| toctou_member_revoked | execution | I29 | CONTAINED |
| toctou_world_change | execution | I28 | CONTAINED |
| token_replay | execution | I26 | CONTAINED |
| tool_substitution | supply_chain | I25 | CONTAINED |
| transfer_from_frozen | termination | I26 | CONTAINED |
| transfer_not_custodian | resources | I4 | CONTAINED |
| transfer_to_frozen | termination | I26 | CONTAINED |
| trust_infinite_propagation | trust | I18 | CONTAINED |
| trust_laundering | trust | I18 | CONTAINED |
| trust_loop_amplification | trust | I18 | CONTAINED |
| trust_no_authority | trust | I43 | CONTAINED |
| trust_revocation | trust | I29 | CONTAINED |
| trust_without_evidence | trust | I42 | CONTAINED |
| twin_does_not_touch_reality | simulation | I31 | CONTAINED |
| twin_execute | simulation | I31 | CONTAINED |
| twin_source_execution | simulation | I31 | CONTAINED |
| unknown_signal_is_deterioration | autonomy_state | I51 | CONTAINED |
| unregistered_agent_admission | membership | I23 | CONTAINED |
| unverified_evidence_not_weighed | court | I42 | CONTAINED |
| wealth_cannot_create_authority | economic | I3 | CONTAINED |
Status: TESTED, PRE-PRODUCTION, not third-party verified, ephemeral signing key, single-host in-process evidence.