CAIN-42 CAIN Studio
25CAIN-42 Top 25 › APPROVAL › Evidence

Evidence

26 attacks written before any change on 2026-11-02, each against one promise.

RunEngineHeldCounts?Note
11.0.017/26noharness bug: broker.mint called without its grants argument; 6 mint cases crashed or passed for the wrong reason. Not a measurement.
21.0.019/26yesharness fixed, engine unchanged: the reported blind result
31.1.026/26yesafter the fixes; the set is now a tuning set

Run 1 is shown because it happened: our own test harness called BROKER wrongly, so it measured nothing. We fixed only the harness and ran again.

Run 2, every row (engine 1.0.0, unchanged)

AttackWantGotResultDetail
self_approval_case_variantrefusedacceptedfailedaccepted
one_person_two_case_idsrefusedacceptedfailedaccepted
approver_id_with_plus_looks_like_tworefusedacceptedfailedaccepted
ambiguous_path_in_requestrefusedacceptedfailedaccepted
backtick_path_spoofs_slack_messagerefusedacceptedfailedaccepted
method_with_whitespacerefusedacceptedfailedaccepted
required_fraction_stringrefusedrefusedheldValueError: invalid literal for int() with base 10: '1.5'
required_bool_truerefusedacceptedfailedaccepted
ballot_used_as_approvalrefusedrefusedheldValueError: DENY
ballot_reused_after_voterefusedrefusedheldApprovalError: ballot_spent
refused_vote_does_not_burn_ballotokokheldaccepted
vote_after_quorumrefusedrefusedheldApprovalError: closed
vote_after_denyrefusedrefusedheldApprovalError: closed
vote_after_expiryrefusedrefusedheldApprovalError: bad_ballot
approval_receipt_used_twicerefusedrefusedheldValueError: DENY
approval_for_other_pathrefusedrefusedheldValueError: DENY
approval_for_other_bodyrefusedrefusedheldValueError: DENY
approval_for_other_agentrefusedrefusedheldValueError: DENY
legit_quorum_mints_onceokokheldaccepted
concurrent_votes_one_outcomeokokheldAPPROVED votes=2 errs=['closed']
forged_ballot_other_ridrefusedrefusedheldApprovalError: bad_ballot
slack_wrong_secretrefusedrefusedheldApprovalError: bad_slack_signature
slack_old_timestamprefusedrefusedheldApprovalError: bad_slack_signature
slack_other_teamrefusedrefusedheldApprovalError: wrong_team
slack_user_mapped_to_agent_case_variantrefusedrefusedheldApprovalError: not_an_approver
ledger_tamper_detectedrefusedrefusedheld{'valid': False}

Raw data: approval-evolution-2026-11-02.json · approval-blind-2026-11-02.json. Our own runs; no independent test.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.