CAIN CXL-Sentry: selling tools

Evidence for CAIN CXL-Sentry: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it

The evidence is your best sales tool: a buyer can check it without trusting you. Press Copy on any box, fill in the [brackets] and send it, one person at a time.

What to send, and when

When	Send this
First message	A short personal note with the kit page
They reply, "show me"	The live demo on a call, using the script below
"Send it to our engineer"	The kit and the evidence pack
Security review or questionnaire	The answers page. Never upgrade a NO to a YES.
Finance or procurement wants records	The figures page and figures.tsv
Ready to go ahead	The hand-off below. The founder does the contract, price and setup.

Who to approach

Infrastructure architect: tenants share memory hardware

Questions to ask them

Where in your systems is tenants share memory hardware?
What checks exist today?

30-second pitch

CAIN CXL-Sentry: CXL-Sentry blocks memory writes outside a tenant's range or without a valid lease.

We recorded 1 live checks, including 1 attack cases it had to refuse or flag, and every one matched. You can re-run them yourself without an account.

Don't trust us. Check it: https://cainstudio.online/ihvrk-cxl-sentry.html

First email

Subject: CAIN CXL-Sentry: CXL-Sentry blocks memory writes outside a tenant's range or 

Hi [first name],

CXL-Sentry is a software check of a requested memory address range and access type against a tenant's aperture; writes need an HMAC lease bound to the exact range and expiry, so a write without a valid lease is blocked.

Live demo: https://cainstudio.online/guide-cxl-sentry-lab.html

The evidence: We recorded 1 live checks, including 1 attack cases it had to refuse or flag, and every one matched. You can re-run them yourself without an account.
Check it yourself: https://cainstudio.online/ihvrk-cxl-sentry.html

[your name], working with FIRME AI CORPORATION
[your postal address]
If you'd rather not hear from me again, just say so and I won't write again.

LinkedIn connection note (under 300 characters)

Hi [name], cXL-Sentry blocks memory writes outside a tenant's range or without a valid lease. Happy to show you the live demo.

One follow-up, three days later (then stop)

Hi [first name], here is the live demo: https://cainstudio.online/guide-cxl-sentry-lab.html

Live demo call script

1. Show the normal case
   Do: Open https://cainstudio.online/guide-cxl-sentry-lab.html and run: Write 4 KB with no valid lease
   Say: Blocked.

2. Now the attack
   Do: Run: Write 4 KB with no valid lease
   Say: Blocked.

3. Let them check you
   Do: Send the kit link and ask them to run python3 verify.py --live on their own computer.
   Say: They don't have to take your word for any of this. That's the point.

4. Say the limit yourself
   Do: Software check only: no CXL, PCIe, IOMMU or RDMA device is involved.
   Say: Say it before they ask. It costs nothing and it earns trust.

When they push back

Does it control the hardware?

No, it is a software check your system calls.

Why should I believe your numbers?

You shouldn't have to. Run the kit on your own computer: https://cainstudio.online/ihvrk-cxl-sentry.html. It re-sends every request and compares the answers, using no code of ours.

What doesn't it do?

Written down here: https://cainstudio.online/guide-cxl-sentry-limits.html

Are you SOC 2 or ISO certified?

No, we hold no certification. What we offer instead is evidence you can check yourself.

Has anyone independent tested it?

No third-party audit has been completed. The attack cases in the kit are our own. I'd rather tell you that now.

Who else uses it?

We are an early company. I can show you the product working and the evidence, not a customer list.

It found nothing. So we're safe?

No. It means none of its checks fired. It doesn't prove something is safe.

How much is it?

Sell CAIN CXL-Sentry as the $500 30-day pilot.

One-page summary (paste into a document or email)

CAIN CXL-Sentry
by FIRME AI CORPORATION, a California corporation

What it does
CXL-Sentry blocks memory writes outside a tenant's range or without a valid lease.

The evidence
We recorded 1 live checks, including 1 attack cases it had to refuse or flag, and every one matched. You can re-run them yourself without an account.
Recorded 2026-11-03. 1 live checks. Median round trip 52 ms including network; this is not a load test or an SLA.

Check it yourself
https://cainstudio.online/ihvrk-cxl-sentry.html
Zip SHA-256: 9f712c6f492750fca659f111bc5ee2db8f500fd593742ebf1fd17b9c1c75c3a4
Signing key fingerprint: 1cacdfc1fc2024b6bb4f8fb02c7c80f4a57f44c5adb11c507190781b5d613de3
Run: python3 verify.py --live  (Python 3, no account, no code of ours)

What it does not do
Written down here: https://cainstudio.online/guide-cxl-sentry-limits.html

What this is not
Not a third-party audit, a certification or a guarantee. No SOC 2 or ISO certification is held.

Contact
[your name], working with FIRME AI CORPORATION, [your email]

After the call: the proposal email

Hi [first name],

Thanks for your time. As discussed, here is what I suggest for CAIN CXL-Sentry.

What you told me: [their problem, in their words]

What we'd do: Sell CAIN CXL-Sentry as the $500 30-day pilot.

Evidence you can check before deciding: https://cainstudio.online/ihvrk-cxl-sentry.html
Answers for your security review: https://cainstudio.online/evidence-cxl-sentry-answers.html
Figures for your files: https://cainstudio.online/evidence-cxl-sentry-figures.html
Limits: Written down here: https://cainstudio.online/guide-cxl-sentry-limits.html

Next step: [date], [who]. The founder, Vincent Noriega, handles contract and setup.

[your name], working with FIRME AI CORPORATION
[your postal address]
If you'd rather not hear from me again, just say so and I won't write again.

Hand-off to the founder

To: vincent@firmeai.com
Subject: Lead: CAIN CXL-Sentry - [company]

Company: [company]
Person: [name], [job title], [email]
What they said: [paste their reply]
Evidence already sent: https://cainstudio.online/ihvrk-cxl-sentry.html
Price mentioned: [what you quoted, or none]
Next date: [date]

The rules

Send each message yourself, one person at a time. No bulk lists and no automated sending.
Commercial email needs your real name, a real postal address and a way to opt out, and you stop when someone asks (US CAN-SPAM; many countries are stricter, so check yours).
Never change a number, invent a customer, or say certified, audited or guaranteed.
Only test a system the client owns or operates, after they confirm it in writing.
Your share is agreed in writing with FIRME AI CORPORATION before your first message (email vincent@firmeai.com). Nothing here promises income. Most messages get no reply; that is normal.