Limits
| Limit | Why it matters |
|---|---|
| It records what the agent reports | A step the integration never sends is not in the recording; pair with CODEGUARD/MCPGate so actions pass a gate that records them |
| Software signing key | The KEYSTONE evidence key is on the gateway host, not in hardware |
| Attributes cannot be erased | Put personal data in payloads |
| 500 steps per recording, 16 KB per payload | Long runs are split into several recordings |
| Single SQLite store | Not a high-volume tracing backend; export to OTLP for that |
| Our own testing | No independent review |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.