CAIN-42 CAIN StudioAttack lab
Score real fleets, then thin out the evidence and see whether the score notices.
5 attacks 2 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| attack | Sample fleet: Accounts-payable agent: wire transfers and bank-detail changes ran ungated | POST /actuary-keystone/scan | A fail-closed risk score computed from CAIN decision evidence. |
| attack | Sample fleet: Coding agent: shell commands and a branch deletion ran without a human | POST /actuary-keystone/scan | A fail-closed risk score computed from CAIN decision evidence. |
| control | Sample fleet: Support agent: every consequential action held or blocked by CAIN | POST /actuary-keystone/scan | A fail-closed risk score computed from CAIN decision evidence. |
| control | Sample evidence, unchanged | GET /actuary-keystone/samples/governed-support-fleet/evidence → POST /actuary-keystone/scan-evidence | The same evidence through the free-form route scores the same. |
| attack | Same evidence with every decision removed | GET /actuary-keystone/samples/governed-support-fleet/evidence → POST /actuary-keystone/scan-evidence | Zero decisions is NO_EVIDENCE, not a good score. |
| attack | One decision only (thin evidence) | GET /actuary-keystone/samples/governed-support-fleet/evidence → POST /actuary-keystone/scan-evidence | Too little evidence cannot earn LOW_RISK. |
| attack | Evidence with no decisions list | POST /actuary-keystone/scan-evidence | Malformed evidence is refused, not scored. |
Tamper with any field and send it again: a verifier must answer no, never crash or say yes. Public demo routes are rate limited per address; a 429 shows as rate limited. Our own lab; no independent test.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.