CAIN-42 CAIN Studio
42CAIN-42 IHVRK › LeakGuard

LeakGuard: evidence, proof and selling tools

Official CAIN-42 IHVRK · New to this product? Learn it first

Don't trust CAIN-42. Verify CAIN-42. This is the Independent Human Verification Resource Kit for LeakGuard: every claim its page makes, as the exact request and the answer it must give, recorded live and signed. You check it on your own machine with a short Python script that uses no CAIN-42 code.

Every claim matched when recorded

Download the kit (.zip)

Everything you can give a customer

The kit

Kitleakguard-20261103T225157
Recorded2026-11-03T22:51:57+00:00 against cainstudio.online
Claims6
Zip SHA-2567cf107ddf63bdc92c734fb59f5d4eeb53c6a4eebe59e2c382d05aaa5c0bac2d2 (also in SHA256SUMS)
Signing key fingerprint1cacdfc1fc2024b6bb4f8fb02c7c80f4a57f44c5adb11c507190781b5d613de3, published on cainstudio.online · mcpgate.online · clawx.click

Verify it on your own machine

unzip cain42-ihvrk-leakguard.zip && cd cain42-ihvrk-leakguard
python3 verify.py            # offline: hashes, Ed25519 signature, recorded answers
python3 verify.py --live     # also re-send every request yourself and check the answers now

A claim that cannot be checked counts as a FAIL, never a pass. The live check is the one that depends on nothing we recorded.

The claims in this kit

#ClaimAnswer must contain
C01An ordinary sentence -> Nothing sensitive.[true]
C02Order and invoice numbers -> Business numbers are not secrets: no false alarm.[true]
C03An AI key, an email and an SSN -> Three findings.[false]
C04An AWS access key ID -> Cloud credentials.[false]
C05A card number -> Passes the card checksum: flagged.[false]
C06A database address with a password -> The password inside the address is found.[false]

Evidence links you can give your customers

Send this to your customer

Don't take our word for it. Verify LeakGuard yourself:
1. Download the official CAIN-42 IHVRK: https://cainstudio.online/proof/bundle/ihvrk-kits/cain42-ihvrk-leakguard.zip
   SHA-256: 7cf107ddf63bdc92c734fb59f5d4eeb53c6a4eebe59e2c382d05aaa5c0bac2d2
2. Unzip it and run: python3 verify.py --live   (Python 3, standard library only, no account)
3. Check the signing key fingerprint 1cacdfc1fc2024b6bb4f8fb02c7c80f4a57f44c5adb11c507190781b5d613de3
   matches https://cainstudio.online/evidence-kit-key.json, https://mcpgate.online/evidence-kit-key.json and https://clawx.click/evidence-kit-key.json
Live demo: https://cainstudio.online/guide-leakguard-lab.html
What it does not do: https://cainstudio.online/guide-leakguard-limits.html

What this kit is, and is not

It shows what the live product answered to these inputs, and lets anyone check that again. It is not a third-party audit, a certification, or a promise about inputs not listed. The product's limits page lists what it does not do.