The replay proof

1. Proposed rules: {"match_path": pattern, "verdict": "REQUIRE_APPROVAL" | "BLOCK"}. Patterns use letters, digits and _ - / . : | ^ $ only, so matching is always linear. Any other verdict, including ALLOW, is refused.
2. The same history is replayed with the rules applied to everything CAIN had allowed.
3. Verified only if no high-risk action is still ungated, the rules gate at most 10% of ordinary read-only work, and the score does not drop.
4. Signed: canonical JSON, SHA-256 chained, Ed25519; the bundle verifies offline.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.