{
 "base": "https://cainstudio.online",
 "checked_at": "2026-10-29T23:39:56Z",
 "passed": 83,
 "total": 83,
 "by_product": {
  "Supply-Chain Guard": [
   7,
   7
  ],
  "Agent-ID": [
   11,
   11
  ],
  "A2A Guard": [
   5,
   5
  ],
  "Action Firewall": [
   2,
   2
  ],
  "TEE Verifier": [
   2,
   2
  ],
  "Content Provenance": [
   8,
   8
  ],
  "Trust State Engine": [
   2,
   2
  ],
  "CainDrift": [
   1,
   1
  ],
  "Shadow AI Scanner": [
   12,
   12
  ],
  "Crypto Audit": [
   16,
   16
  ],
  "EU AI Act Classifier": [
   15,
   15
  ],
  "Contamination Scanner": [
   2,
   2
  ]
 },
 "results": [
  {
   "product": "Supply-Chain Guard",
   "case": "typosquat numpyy",
   "pass": true,
   "detail": "verdict=REQUIRE_APPROVAL status=200"
  },
  {
   "product": "Supply-Chain Guard",
   "case": "typosquat lodahs",
   "pass": true,
   "detail": "verdict=DENY status=200"
  },
  {
   "product": "Supply-Chain Guard",
   "case": "untrusted extra index",
   "pass": true,
   "detail": "verdict=DENY status=200"
  },
  {
   "product": "Supply-Chain Guard",
   "case": "pipe to shell",
   "pass": true,
   "detail": "verdict=DENY status=200"
  },
  {
   "product": "Supply-Chain Guard",
   "case": "install from git URL",
   "pass": true,
   "detail": "verdict=DENY status=200"
  },
  {
   "product": "Supply-Chain Guard",
   "case": "normal pinned install",
   "pass": true,
   "detail": "verdict=ALLOW status=200"
  },
  {
   "product": "Supply-Chain Guard",
   "case": "normal npm install",
   "pass": true,
   "detail": "verdict=ALLOW status=200"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'billing:refund' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'billing:refund'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'admin' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'admin'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'search:query:admin' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'search:query:admin'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'DOCS:READ' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'DOCS:READ'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'docs:*' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'docs:*'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope '*' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for '*'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'search:*' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'search:*'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'search:query ' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'search:query '\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'search' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'search'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "ungranted scope 'docs:read:../admin' refused",
   "pass": true,
   "detail": "{'valid': False, 'error': \"token not scoped for 'docs:read:../admin'\"}"
  },
  {
   "product": "Agent-ID",
   "case": "granted scope accepted",
   "pass": true,
   "detail": "{'valid': True, 'claims': {'jti': '1993326c3aef4802bbcc0e391549ec9b', 'iss': 'agentid', 'principal': 'alice@acme.example', 'sub': 'research-bot', 'chain': [], 'scopes': ['docs:read', 'search:query'], 'iat': 1793317168, 'exp': 1793317288}}"
  },
  {
   "product": "A2A Guard",
   "case": "original card verifies; copy with 'delete_all_records' added is rejected",
   "pass": true,
   "detail": "[True, False]"
  },
  {
   "product": "A2A Guard",
   "case": "original card verifies; copy with 'wire_transfer_unlimited' added is rejected",
   "pass": true,
   "detail": "[True, False]"
  },
  {
   "product": "A2A Guard",
   "case": "original card verifies; copy with 'admin' added is rejected",
   "pass": true,
   "detail": "[True, False]"
  },
  {
   "product": "A2A Guard",
   "case": "original card verifies; copy with '\u0455earch' added is rejected",
   "pass": true,
   "detail": "[True, False]"
  },
  {
   "product": "A2A Guard",
   "case": "original card verifies; copy with 'summarize ' added is rejected",
   "pass": true,
   "detail": "[True, False]"
  },
  {
   "product": "Action Firewall",
   "case": "rule-breaking plan blocked before it runs",
   "pass": true,
   "detail": "{\"verification_id\": \"f5f10d8a-8cdb-428f-8544-1a8359e80863\", \"trust_decision\": {\"signed_by\": \"action-firewall (this deployment's own ed25519 key; no external trustdecision engine is configured)\", \"algo"
  },
  {
   "product": "Action Firewall",
   "case": "compliant plan allowed to proceed",
   "pass": true,
   "detail": "{\"verification_id\": \"1816b86c-2c49-4086-940c-2d90a78e3fcb\", \"trust_decision\": {\"signed_by\": \"action-firewall (this deployment's own ed25519 key; no external trustdecision engine is configured)\", \"algo"
  },
  {
   "product": "TEE Verifier",
   "case": "pinned AWS Nitro and AMD SEV-SNP roots served",
   "pass": true,
   "detail": "{\"anchors\": {\"aws_nitro_root_g1\": {\"subject\": \"cn=aws.nitro-enclaves,ou=aws,o=amazon,c=us\", \"sha256\": \"641a0321a3e244efe456463195d606317ed7cdcc3c1756e09893f3c68f79bb5b\", \"source\": \"https://aws-nitro-e"
  },
  {
   "product": "TEE Verifier",
   "case": "verifier signing key served",
   "pass": true,
   "detail": "{'algorithm': 'Ed25519', 'public_key_hex': '912b99557cf8db9eb975bf40a70bd365edcc649b5081b7ea3394c2ccf67bf447', 'service': 'tee-verifier'}"
  },
  {
   "product": "Content Provenance",
   "case": "manifest verifies on the original text: 'Quarterly summary drafted by a'",
   "pass": true,
   "detail": "{'valid': True, 'disclosure': {'manifest_id': 'ae78a1c474e8dc96', 'iss': 'content-provenance', 'content_hash': '570a526796103f7226367dc841fadb73d7fbceb7ddede8047b1892e2404562af', 'generator': 'cain-homepage', 'model': 'demo-model', 'content"
  },
  {
   "product": "Content Provenance",
   "case": "manifest fails on an edited copy: 'Quarterly summary drafted by a'",
   "pass": true,
   "detail": "{'valid': False, 'error': 'content hash does not match the manifest -- content was modified after disclosure, or this manifest belongs to different content'}"
  },
  {
   "product": "Content Provenance",
   "case": "manifest verifies on the original text: 'Board minutes drafted by an AI'",
   "pass": true,
   "detail": "{'valid': True, 'disclosure': {'manifest_id': '9133d025abddee15', 'iss': 'content-provenance', 'content_hash': '3e6e8426377b5cf14ccf0505c7b34e92b8a5fc64c367e97fce8d5916d42c66c9', 'generator': 'cain-homepage', 'model': 'demo-model', 'content"
  },
  {
   "product": "Content Provenance",
   "case": "manifest fails on an edited copy: 'Board minutes drafted by an AI'",
   "pass": true,
   "detail": "{'valid': False, 'error': 'content hash does not match the manifest -- content was modified after disclosure, or this manifest belongs to different content'}"
  },
  {
   "product": "Content Provenance",
   "case": "manifest verifies on the original text: 'Price: $1,000 per seat, drafte'",
   "pass": true,
   "detail": "{'valid': True, 'disclosure': {'manifest_id': 'bc413807811e5119', 'iss': 'content-provenance', 'content_hash': 'd2c2de439082c1e1dd8411d978c44318d2c99ef46438920f80637b1498e4e911', 'generator': 'cain-homepage', 'model': 'demo-model', 'content"
  },
  {
   "product": "Content Provenance",
   "case": "manifest fails on an edited copy: 'Price: $1,000 per seat, drafte'",
   "pass": true,
   "detail": "{'valid': False, 'error': 'content hash does not match the manifest -- content was modified after disclosure, or this manifest belongs to different content'}"
  },
  {
   "product": "Content Provenance",
   "case": "manifest verifies on the original text: 'R\u00e9sum\u00e9 summary written by AI'",
   "pass": true,
   "detail": "{'valid': True, 'disclosure': {'manifest_id': '681dd5808f310fb2', 'iss': 'content-provenance', 'content_hash': '3701750af010bae495f0126b4cbf5c72c9aeecbc92c3cd9dfd602e0ca42b7f6a', 'generator': 'cain-homepage', 'model': 'demo-model', 'content"
  },
  {
   "product": "Content Provenance",
   "case": "manifest fails on an edited copy: 'R\u00e9sum\u00e9 summary written by AI'",
   "pass": true,
   "detail": "{'valid': False, 'error': 'content hash does not match the manifest -- content was modified after disclosure, or this manifest belongs to different content'}"
  },
  {
   "product": "Trust State Engine",
   "case": "after a violation, a high-risk action is denied",
   "pass": true,
   "detail": "{\"tenant\": \"public-demo\", \"principal_id\": \"agent-5ee0e923\", \"risk_level\": \"high\", \"trust_state\": \"degraded\", \"trust_score\": 0.48499996985706906, \"authorization_decision\": \"deny\", \"requires_approval\": "
  },
  {
   "product": "Trust State Engine",
   "case": "the denial comes with an explanation",
   "pass": true,
   "detail": "{\"principal_id\": \"agent-5ee0e923\", \"tenant\": \"public-demo\", \"generated_at\": \"2026-10-29t23:39:34.705079+00:00\", \"why_trust_changed\": \"trust degraded due to: 1 policy violation(s) detected\", \"what_evid"
  },
  {
   "product": "CainDrift",
   "case": "regression after a model swap is flagged",
   "pass": true,
   "detail": "{\"verdict\": \"regression\", \"total_prompts\": 2, \"flagged_count\": 1, \"flagged_rate\": 0.5, \"results\": [{\"prompt\": \"summarize our refund policy\", \"flagged\": false, \"reasons\": [], \"metrics\": {\"structural_si"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "hidden AI/agent use found in the demo repo",
   "pass": true,
   "detail": "{\"scan_id\": 14, \"commit_sha\": \"abc123\", \"files_scanned\": 1, \"risk_score\": 87, \"findings\": [{\"category\": \"agent\", \"finding_type\": \"llm_sdk_import\", \"path\": \"agent.py\", \"line\": 1, \"symbol\": \"openai\", \"c"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "AI called over raw HTTP is found (llm_api_endpoint)",
   "pass": true,
   "detail": "{\"scan_id\": 14, \"commit_sha\": \"abc123\", \"files_scanned\": 1, \"risk_score\": 87, \"findings\": [{\"category\": \"agent\", \"finding_type\": \"llm_sdk_import\", \"path\": \"agent.py\", \"line\": 1, \"symbol\": \"openai\", \"c"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds Gemini over httpx",
   "pass": true,
   "detail": "['llm_api_endpoint']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds Mistral over urllib",
   "pass": true,
   "detail": "['llm_api_endpoint']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds __import__('anthropic')",
   "pass": true,
   "detail": "['llm_sdk_import']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds local Ollama",
   "pass": true,
   "detail": "['llm_api_endpoint']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds litellm",
   "pass": true,
   "detail": "['llm_sdk_import']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds OpenRouter base URL",
   "pass": true,
   "detail": "['llm_api_endpoint']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds Azure OpenAI endpoint",
   "pass": true,
   "detail": "['llm_api_endpoint']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "finds AWS Bedrock client",
   "pass": true,
   "detail": "['llm_api_endpoint']"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "ordinary Flask app calling GitHub is clean",
   "pass": true,
   "detail": "[]"
  },
  {
   "product": "Shadow AI Scanner",
   "case": "ordinary S3 + DynamoDB clients are clean",
   "pass": true,
   "detail": "[]"
  },
  {
   "product": "Crypto Audit",
   "case": "finds RSA-1024",
   "pass": true,
   "detail": "['InsecureMode_ECB', 'JWT_SignatureNotVerified', 'ShortRSAKey', 'StaticIV_or_Nonce', 'TLS_VerificationDisabled']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds AES-ECB",
   "pass": true,
   "detail": "['InsecureMode_ECB', 'JWT_SignatureNotVerified', 'ShortRSAKey', 'StaticIV_or_Nonce', 'TLS_VerificationDisabled']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds JWT signature check off",
   "pass": true,
   "detail": "['InsecureMode_ECB', 'JWT_SignatureNotVerified', 'ShortRSAKey', 'StaticIV_or_Nonce', 'TLS_VerificationDisabled']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds TLS verification off",
   "pass": true,
   "detail": "['InsecureMode_ECB', 'JWT_SignatureNotVerified', 'ShortRSAKey', 'StaticIV_or_Nonce', 'TLS_VerificationDisabled']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds fixed IV",
   "pass": true,
   "detail": "['InsecureMode_ECB', 'JWT_SignatureNotVerified', 'ShortRSAKey', 'StaticIV_or_Nonce', 'TLS_VerificationDisabled']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds pycryptodome ECB",
   "pass": true,
   "detail": "['InsecureMode_ECB']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds requests verify=False",
   "pass": true,
   "detail": "['TLS_VerificationDisabled']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds MD5 password hash",
   "pass": true,
   "detail": "['WeakHash_MD5']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds DES",
   "pass": true,
   "detail": "['AES_CBC_NoMAC', 'WeakCipher_DES']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds RSA-512",
   "pass": true,
   "detail": "['ShortRSAKey']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds random() used for a token",
   "pass": true,
   "detail": "['InsecureRandom_Crypto']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds key literal passed to Fernet",
   "pass": true,
   "detail": "['HardcodedKey']"
  },
  {
   "product": "Crypto Audit",
   "case": "finds JWT with alg none",
   "pass": true,
   "detail": "['JWT_SignatureNotVerified']"
  },
  {
   "product": "Crypto Audit",
   "case": "correct code gets no finding: bcrypt + sha256 + secrets",
   "pass": true,
   "detail": "[]"
  },
  {
   "product": "Crypto Audit",
   "case": "correct code gets no finding: requests with default TLS checks",
   "pass": true,
   "detail": "[]"
  },
  {
   "product": "Crypto Audit",
   "case": "correct code gets no finding",
   "pass": true,
   "detail": "[]"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "public social scoring -> prohibited",
   "pass": true,
   "detail": "unacceptable"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "real-time police face ID -> prohibited",
   "pass": true,
   "detail": "unacceptable"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "emotion reading of staff by webcam -> prohibited",
   "pass": true,
   "detail": "unacceptable"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "loan creditworthiness -> high",
   "pass": true,
   "detail": "high"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "support chatbot -> limited",
   "pass": true,
   "detail": "limited"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "spam filter -> minimal",
   "pass": true,
   "detail": "minimal"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "unknown system -> undetermined, never minimal",
   "pass": true,
   "detail": "undetermined"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "subliminal nudging of gamblers -> prohibited",
   "pass": true,
   "detail": "unacceptable"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "crime prediction from personality -> prohibited",
   "pass": true,
   "detail": "unacceptable"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "scraping faces for a database -> prohibited",
   "pass": true,
   "detail": "unacceptable"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "CV screening -> high",
   "pass": true,
   "detail": "high"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "university admission -> high",
   "pass": true,
   "detail": "high"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "welfare eligibility -> high",
   "pass": true,
   "detail": "high"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "deepfake generator -> limited",
   "pass": true,
   "detail": "limited"
  },
  {
   "product": "EU AI Act Classifier",
   "case": "video game opponent -> minimal",
   "pass": true,
   "detail": "minimal"
  },
  {
   "product": "Contamination Scanner",
   "case": "memorized model flagged (risk >= 0.9)",
   "pass": true,
   "detail": "1.0"
  },
  {
   "product": "Contamination Scanner",
   "case": "clean model cleared (risk below 0.1)",
   "pass": true,
   "detail": "0.0"
  }
 ]
}