FAQ

Is this OAuth?

It is a standard compact JWS any JWT library can parse, but each credential is for one action, not a scope, and is consumed on use.

What if two instances of my service see the same token at the same moment?

Use one shared store for seen with an atomic insert (BROKER's own uses SQLite's primary key). Only one insert can win.

Can an agent turn one credential into two?

Not since 2026-11-02: every child shares its parent's single use.

Does a model decide anything?

No. Minting is a deterministic decision against grants.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.