CAIN-42 CAIN StudioLimits
| Limit | Why it matters |
|---|---|
| It reads the command, not what a script does | ./run.sh inside your project is allowed: its contents decide what happens |
| A determined attacker can still find gaps | Every blind set so far found new misses (C: 4, D: 4). Treat it as a strong layer, not a sandbox |
| One deliberate false alarm class | git push git@host:org/repo.git asks, because pushing to an address instead of a configured remote can copy code anywhere |
| Unknown programs are asked about | Teams with many in-house tools will see more prompts at first |
| The hook sends the command (and file content unless turned off) to our server | Self-hosting the gate is offered for audits and pilots |
| Our own testing | No independent review yet |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.