CAIN-42 CAIN StudioQuarantine and review
| Who | Can | Cannot |
|---|---|---|
| The agent (tenant key) | Write, recall, see that a quarantined memory exists and why | Read its text; release it |
The reviewer (tenant key + X-CAIN-Reviewer secret) | Read the quarantined text, release it with their name recorded | Erase the record that it happened |
Setting up the reviewer
POST /aether33/api/reviewer {"secret": "at least 12 characters"} (once; changing it needs "old_secret")
GET /aether33/api/memories/{id} X-CAIN-Reviewer: <secret> (shows quarantined text)
POST /aether33/api/memories/{id}/release X-CAIN-Reviewer: <secret> {"reviewed_by": "Monica Diaz"}
Only a salted hash of the secret is stored. Set it before the agent gets the tenant key: whoever sets it first holds it.
Until 2026-11-02
A typed name was enough to release, and include_quarantined returned the injected text to the caller. Both
were found by today's blind set and fixed.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.