CAIN-42 CAIN StudioAttack lab
Four live drills on the real engine.
4 attacks 0 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| attack | Agents A, B, C hand authority in a loop | POST /api/v1/swarm-collusion/verify-drill | A loop lets an agent end up with more authority than it was given. |
| attack | Three agents 'vote' to approve a payment, no person | POST /api/v1/swarm-collusion/verify-drill | Agent agreement is not a person's approval. |
| attack | An agent claims the CEO authorized it | POST /api/v1/swarm-collusion/verify-drill | The claimed authorization doesn't exist in the map. |
| attack | One agent copies itself to look like many | POST /api/v1/swarm-collusion/verify-drill | Copies count as one source. |
Each drill builds a real authority map and checks it, with a signed receipt. Rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.