The offer, the price and the close

cain_audit is how we deliver. Sell the Fabrication Audit (code) or the MCP / Agent Tool Review (tools).

What you sell

What the client receives

• report.md: every module graded REAL / PARTIAL / STUB / UNKNOWN, with the exact lines that caused each grade.
• findings.json: the same result for the client's engineers, machine readable.
• evidence.zip: a signed record plus a small checker that imports none of our code.
• A list of the files that were clean, and a section of notes from the person who reviewed it.

What the offer itself says about its limits

• The detector is precise but narrow: it misses many kinds of fake code. A clean grade is not a guarantee.
• A person reviews every finding before the report goes out.

Price source: Operator playbook stream 1 (docs/strategy/CAIN-AS-A-BUSINESS-OPERATOR-PLAYBOOK.md); delivered by cain_audit. Prices are the founder's proposed list prices, not validated market rates; any discount needs the founder's OK.

Also offer

What the client receives

• Tool-schema scan: injection in descriptions, secrets, unconstrained exec/sql/path parameters.
• Tool-poisoning, typosquat and authentication findings.
• Authority boundary and action-firewall gap analysis.
• Ranked remediation with the smallest patch, plus a signed bundle.

What the offer itself says about its limits

• Heuristic static analysis of definitions; a clean scan is not a guarantee.
• We do not probe a live production server without written scope.
• Findings are ranked by blast radius, not by count.

Price source: cain_audit/products.py → mcp-review. Prices are the founder's proposed list prices, not validated market rates; any discount needs the founder's OK.

What you need from the client

• Code zip or MCP tool list.
• Written authorisation.
• Who the report is for.

How to close

1. Ask what is in scope.
2. Quote the matching offer from the price book.
3. Send the sample deliverable.
4. Hand to the founder.

Copy you can send

First email

Subject: an outside review your customer can re-check

Hi [first name],

If a customer or investor is asking for an outside review, we deliver one at a fixed price:
a readable report, the findings, and a sealed evidence bundle that proves which files were reviewed and that
nobody edited the report afterwards.

Sample: https://cainstudio.online/top25-cain-audit-sample.html

[your name], FIRME AI CORPORATION

LinkedIn connection note (under 300 characters)

Hi [name], we do fixed-price code and MCP reviews with a sealed report your customers can re-check. Here is a public sample if useful.

Follow-up, three days later

Hi [first name], did the sample make sense? Happy to scope yours in 15 minutes.

Fill in the brackets by hand for each person. Never paste the same message to a list.

Hand-off to the founder

Email vincent@firmeai.com with: company, person and role, what they said in their own words, which offer, the price you quoted, and the agreed next date. The founder handles scoping, written authorisation to test, invoices and delivery.

Next: the rules, the glossary and the quiz →

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.