CAIN-42 CAIN StudioLimits
| Limit | Why it matters |
|---|---|
| Injection screening is pattern-based | Paraphrases, other languages and semantic attacks get through; it is one layer |
| Retrieval is lexical (BM25) | No embeddings: synonyms do not match |
| Contradiction detection is lexical | Misses disagreements phrased differently; can flag a nuanced update |
| Preview tenants are a hash of address + browser, or a hex id you choose | Two people behind one office address with the same browser share memory unless they send their own id |
| Whoever sets the reviewer secret first holds it | Set it before giving the agent the key |
| One SQLite file, single writer, no encryption at rest, no replication | Not a production-hardened store; keep your own copy |
| Our own testing | No independent review, no SOC 2 |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.