CAIN-42 CAIN StudioAttack lab
Each run registers a real card (search, summarize), checks it, then checks a copy with the capability you name added.
4 attacks 1 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | The original, untouched card verifies | POST /catalog-demo/a2a-guard/run | The registered card matches its signature. |
| attack | Copy with 'transfer_funds' added | POST /catalog-demo/a2a-guard/run | One added capability breaks the signature. |
| attack | Copy with 'wire_transfer_unlimited' added | POST /catalog-demo/a2a-guard/run | Same: rejected. |
| attack | Copy with 'delete_all_users' added | POST /catalog-demo/a2a-guard/run | Rejected. |
| attack | Even a harmless-sounding 'read_calendar' added | POST /catalog-demo/a2a-guard/run | Integrity is all-or-nothing: any edit fails, whether it looks dangerous or not. |
Each button runs register, verify, verify-edited on the live service. Shared demo; rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.