TESTED library · not hosted · not third-party reviewed · ephemeral keys.
Any agent can connect and receive a signed, portable execution identity. Identity travels; authority does not: every receiving domain recomputes authority, every model/runtime change invalidates it until re-evaluated, and every allowed action goes through the E8 Action Commit boundary and leaves a signed receipt.
Invariants 90/90; adversarial scenarios 442/442 contained; mutation 9/10 killed (survivor explained: replay_cache_off); conformance 17/17; tests 11 passed / 0 failed; clean-room verifier INTACT (243/243).
| Step | Result |
|---|---|
| EXTERNAL_AGENT | OK |
| CAIN_CONNECT | OK |
| PORTABLE_EXECUTION_IDENTITY | OK |
| BOUNDED_AUTHORITY | OK |
| DELEGATED_SUBAGENT | OK |
| MODEL_RUNTIME_CHANGE | OK |
| REAUTHORIZATION | OK |
| GOVERNED_ACTION | OK |
| E8 | OK |
| MCP_A2A_API | OK |
| EXECUTION | OK |
| SUBAGENT_BOUNDED | OK |
| GOVERNANCE_RECEIPT | OK |
| INDEPENDENT_VERIFICATION | OK |
| REVOCATION | OK |
| FAILED_REPLAY | OK |
| Category | Contained |
|---|---|
| identity | 75/75 |
| delegation | 53/53 |
| replay_fork | 55/55 |
| cross_domain | 50/50 |
| model_runtime_substitution | 50/50 |
| credential | 50/50 |
| memory_identity_confusion | 51/51 |
| protocol_boundary | 58/58 |