CAIN-42 CAIN StudioCAINPay: figures & benchmarks
Evidence for CAINPay: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist
Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.
5/5
claims matched when recorded
4
attack cases refused or flagged as claimed
163 ms
median round trip (min 140, max 424), incl. network
| # | Kind | Claim | Recorded value | HTTP | ms |
|---|---|---|---|---|---|
| C01 | control | Pay office-supplies.example (allowed) -> An ordinary merchant inside the limits. | "APPROVED" | 200 | 424 |
| C02 | attack | Pay casino.example (blocked) -> On the deny list. | "DECLINED" | 200 | 162 |
| C03 | attack | Same casino, in capitals with a trailing dot -> Spelling tricks don't get past the list. | "DECLINED" | 200 | 163 |
| C04 | attack | Same casino, as a checkout web address -> A full address still resolves to the blocked merchant. | "DECLINED" | 200 | 177 |
| C05 | attack | A sub-domain of the casino -> Sub-domains of a blocked merchant are blocked too. | "DECLINED" | 200 | 140 |
Copy the table (paste into a spreadsheet)
id kind claim recorded_value expected http ms recorded_at C01 control Pay office-supplies.example (allowed) -> An ordinary merchant inside the limits. "APPROVED" ["APPROVED"] 200 424 2026-11-03T22:48:22+00:00 C02 attack Pay casino.example (blocked) -> On the deny list. "DECLINED" ["DECLINED"] 200 162 2026-11-03T22:48:23+00:00 C03 attack Same casino, in capitals with a trailing dot -> Spelling tricks don't get past the list. "DECLINED" ["DECLINED"] 200 163 2026-11-03T22:48:24+00:00 C04 attack Same casino, as a checkout web address -> A full address still resolves to the blocked merchant. "DECLINED" ["DECLINED"] 200 177 2026-11-03T22:48:24+00:00 C05 attack A sub-domain of the casino -> Sub-domains of a blocked merchant are blocked too. "DECLINED" ["DECLINED"] 200 140 2026-11-03T22:48:25+00:00
Download: figures.tsv · transcript.json (full answers) · whole kit
How to read these numbers
- Recorded 2026-11-03T22:48:26+00:00 against cainstudio.online from our build host; times include the internet round trip.
- They show these inputs, not every possible input. Known misses are on the limits page.
- This is not a load test, an SLA or a third-party benchmark. Re-run it yourself:
python3 verify.py --live.