CAIN-42 CAIN Studio
Sign inGet started
Menu
25CAIN-42 Product guides › CAIN Proof-Carrying Code

CAIN Proof-Carrying Code, explained for beginners

PCC refuses agent-written code that could run shell commands or arbitrary code, before it runs.

No AI background needed. Read this page (3 minutes), then try the three live demo tools, then the copy, paste, send page and the six-page seller's guide.

What it is

Agents write and run code. PCC checks that code first, by reading its structure (its syntax tree), not by running it.

Code that parses, imports only allowed modules and has no dynamic execution is CERTIFIED_SAFE and lists the checks it passed. Code that calls os.system, eval and the like fails verification.

An everyday comparison

A building inspector who reads the plans and refuses any with a door to the gas main.

How it works, in 4 steps

  1. The agent submits code.
  2. Its structure is analysed without running it.
  3. All checks pass: certified. Any fails: refused.
  4. The result lists each check.

Try it now

Open the three live demo tools → Every button sends a real request to the live product and shows the real answer.

See it on the homepage: CAIN Proof-Carrying Code section →

Who it is for

Teams letting agents generate and run code.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.