CAIN-42 CAIN StudioAttack lab
The live demo checks two plans against 'wires over $10,000 need two different approvers': one with one approver, one with two. Each tool checks one fact from the same live run.
2 attacks 1 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| attack | Plan with one approver for a $50,000 wire: blocked | POST /catalog-demo/action-firewall/run | Z3 finds the breaking step before anything runs. |
| attack | The rule it breaks is the dual-approval rule | POST /catalog-demo/action-firewall/run | The proof names the rule and the step. |
| control | Same wire with two different approvers: proceeds | POST /catalog-demo/action-firewall/run | The rule is satisfied; the plan may run. |
Each button runs the live two-plan demo and checks one fact of it. Shared demo; rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.