Limits
| Limit | Why it matters |
|---|---|
| The engine is narrow (3 of 12 on a fresh blind set) | A report without a person's review will miss most fabrication the rules do not know |
| Python only by default | Other extensions can be included, but the checks are Python checks |
| Static analysis | Nothing is executed; business logic is not reviewed |
| The code check covers what was scanned | Files the tool excluded (too large, not UTF-8, vendored folders) are not in the manifest |
| One signing key, one host | The client must pin the key from a source they trust |
| No paid audit delivered yet | The tool is tested; the service has no client references yet |
| Not a certification | No standard body stands behind the report |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.