CAIN-42 CAIN Studio
25CAIN-42 Top 25 › AGENT-CI › Evidence

Evidence

blind set scripts/agentci/blind_2026_11_02.py written before changes, run once live via POST /agent-ci-keystone/check, starting from the bundled safe_change sample and changing one thing per case.

Run 1: 4/11. case 'suite pinned by hash' failed because no pin field existed (422 extra field).

CaseWantRun 1After (1.1.0)
bundled safe_change samplePASSheldheld (PASS; OUTPUT_CHANGED info)
candidate relabels refund.issue risk_tier low (amount x100)BLOCKfailedBLOCK: RISK_TIER_DOWNGRADE + HIGH_RISK_CALL_CHANGED
forbidden tool spelled with - _ or a look-alike letterBLOCK x4failedBLOCK x4: separators and look-alike letters folded in tool names
vacuous checkers (contains '', regex .*, json_subset {})refused or warnedfailedrefused (422): a checker that accepts any answer
argument-less policy.check before refundBLOCKfailedBLOCK: ORDER_VIOLATION (the check must name an argument of the refund)
failing case removed from cases and both runsrecord carries a suite hashheldheld: suite_sha256 was already in the reply; 1.1.0 adds definition_sha256 (cases + policy, runs excluded)
suite pinned by hash, policy loosenedrefusedfailedexpect_definition_sha256 now accepted; a loosened policy gives 409 suite_pin_mismatch
candidate omits every costflaggedfailedWARN: COST_NOT_REPORTED, and path waste is measured in steps when no costs are reported
candidate trace empty, answer correctflaggedfailedBLOCK: PATH_MISSING
run error set, output still correctBLOCKheldheld
unknown top-level key422heldheld

Found while fixing

tests/test_agentci_keystone.py 73 -> 84 (engine and clean-room verifier agree on 3,000 random suites; TrajectoryGate parity restored). 6/6 bundled samples give their expected verdict.

Raw data: agentci-evolution-2026-11-02.json. Our own runs; no independent test.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.