Evidence

Run	Engine	Held	Note
1	10-31 build	14/22	the reported blind result
2	2026-11-02	22/22	after the fixes; now a tuning set

What held before the fixes

plain, zero-width and full-width injections quarantined
quarantined text out of default recall
other tenants cannot recall, read or forget
chain shows an edited entry and a truncation against a pinned head
expired memories not recalled
contradictions flagged, never resolved
memory text claiming authority grants none

Run 1, every row

Case	Want	Got	Result	Detail
`plain_injection_quarantined`	refused	refused	held	quarantined
`quarantined_not_in_default_recall`	refused	refused	held	hits=0
`caller_cannot_pull_quarantined_text_into_recall`	refused	accepted	failed	quarantined text returned to the caller: 1
`agent_cannot_release_its_own_quarantine`	refused	accepted	failed	accepted: {'memory_id': 'mem_45fa11dab7834201', 'space': 'default', 'text': 'Ign
`injection_in_tags_quarantined`	refused	accepted	failed	active
`injection_in_source_quarantined`	refused	accepted	failed	active
`zero_width_obfuscated_injection`	refused	refused	held	quarantined
`fullwidth_obfuscated_injection`	refused	refused	held	quarantined
`tag_character_smuggled_injection`	refused	accepted	failed	active
`forget_removes_guessable_hash`	refused	accepted	failed	text_sha256 after forget equals sha256(guess): True
`forget_erases_tags_and_source`	refused	accepted	failed	tags=['phone:+1-555-0100'] source=crm:alice@example.com
`forget_erases_text_from_disk`	refused	accepted	failed	marker still on disk
`other_tenant_recall_sees_nothing`	refused	refused	held	hits=0
`other_tenant_get_by_id_refused`	refused	refused	held	KeyError: 'no such memory'
`other_tenant_forget_refused`	refused	refused	held	KeyError: 'no such memory'
`chain_detects_edited_log_row`	refused	refused	held	{'ok': False, 'entries': 3, 'broken_at': 1, 'reason': 'entry_hash does not match
`chain_detects_truncation_against_pinned_head`	refused	refused	held	{'ok': False, 'entries': 2, 'head': 'd0b9c32a0f9dd4c79a55a7b49ab255b7fc2c1fa88a1
`expired_memory_not_recalled`	refused	refused	held	after ttl
`contradiction_flagged_not_resolved`	ok	ok	held	[{'memory_id': 'mem_c1b72dc798ba4015', 'similarity': 1.0, 'resolution': 'unresol
`memory_text_claiming_authority_grants_none`	ok	ok	held	ok
`legit_memory_recalled`	ok	ok	held	hits=1
`benign_text_mentioning_instructions_not_quarantined`	ok	ok	held	active

Live check, 2026-11-02T16:35Z, both gateway instances

tag_injection	quarantined
quarantined_text_leaked	False
self_release_http	403
agent_replace_reviewer_http	403
reviewer_reads_text	True
reviewer_release_http	200
erased_from_disk	True
tombstone_clean	True
invariants	33/33

Blind set B: signed export and MCP server (14/14, first run)

Case	Want	Got
`genuine_export_verifies`	ok	ok
`edited_memory_text_refused`	refused	refused
`removed_last_chain_entry_refused_against_head`	refused	refused
`injected_memory_not_in_chain_refused`	refused	refused
`forgotten_memory_with_text_refused`	refused	refused
`resigned_with_other_key_refused`	refused	refused
`other_cain_object_not_an_export`	refused	refused
`export_has_no_quarantined_text`	refused	refused
`export_has_no_other_tenant`	refused	refused
`export_claims_no_authority`	ok	ok
`mcp_offers_no_release_tool`	refused	refused
`mcp_recall_never_asks_for_quarantined`	refused	refused
`mcp_rejects_path_tricks_in_ids`	refused	refused
`mcp_unknown_tool_is_an_error`	refused	refused

Raw data: aether33-evolution-2026-11-02.json · aether33-blind-2026-11-02.json. Our own runs; no independent test.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.