FAQ

Does a person review my code?

The report tells you. When a person reviews it, their notes and name appear in section 7, covered by the signature. When nobody did, section 7 says so in bold and the signed record says reviewed_by_person: false. Ask for a review in your engagement terms if you want one.

How do I know the report is about my code and not someone else's?

Run audit-code-check.py on the bundle and your folder. It rebuilds the manifest and compares it with the signed one.

Can you change the report after delivering it?

Not without the verifier saying TAMPERED. The report and findings are hashed into the signed record.

What if the engine finds nothing?

The grade is REAL, and the report explains that this means none of the checks fired, not that the code is correct.

Is this a certification?

No.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.