Limits
What it does not do. Say these plainly if a buyer asks.
- It reads code; it does not watch network traffic, so AI used through a browser or a SaaS tool is not seen.
- In our own check on 2026-11-03 it did not flag an MCP client session or an AI library imported by a name built at run time. It is not complete.
- It reports what it finds; a score of 0 means none of its checks fired, not that no AI is used.
- Our own testing; no independent review or third-party audit.
- Not a certification.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.