FAQ

Does an AI decide?

No. Every decision is a deterministic rule result. The optional hardening step (KEYSTONE) may ask Claude for a safer command, but the gate re-checks whatever it proposes.

Why not just use the agent's allow-list?

Allow-lists match the start of a command. git -c alias.x='!rm -rf ~' x starts with git.

Will it slow my agent down?

The check itself takes under a millisecond (median 0.27 ms on our server); the network round trip to the hosted gate is most of the time.

Can I see what it missed?

Yes: blind set D lists every row.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.