CAIN RIG, explained for beginners

RIG gives each AI agent its own identity and one-time permission tokens that a thief can't reuse.

What it is

Shared service accounts let one compromised agent act as all of them. RIG gives each agent its own Ed25519 key; to use a permission, the agent must prove it holds that key.

Permissions come as tokens: one action, one resource, a 30-second default lifetime, usable once. A second use is refused, a stolen token is useless without the agent's key, and a child agent can never get more permission than its parent.

An everyday comparison

A single-use visitor badge printed with your photo, for one room, that stops working after one swipe.

How it works, in 4 steps

1. Register the agent's public key and what it may do.
2. Mint a token for one action on one resource.
3. The agent signs to use it, once.
4. Reuse, a wrong key or a different action is refused.

Try it now

Open the five live demo tools → Every button sends a real request to the live product and shows the real answer.

See it on the homepage: CAIN RIG section →

Who it is for

Teams running many agents with access to real systems.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.