CAIN-42 CAIN Studio

Sign in Get started

25CAIN-42 Top 25 › Signed decision receipts › Evidence

Evidence

Run	Engine	Held	Note
1	codeguard-1.1.0	15/18	the reported blind result
1b	codeguard-1.1.0	corrected single-use case failed (ALLOW, ALLOW)	run 1's single-use row used rm -rf ~/, which is always DENY, so it tested nothing; re-tested on the unchanged engine with git reset --hard, which needs approval
2	codeguard-1.2.0	18/18	after the fixes, with the corrected single-use case

Rows that held for the wrong reason

Case	Why it does not count
receipt_as_approval_token_refused	refused only because receipts have no 'exp' field; now refused by type
approval_token_single_use	tested an always-DENY command; corrected and it failed

Run 1, every row

Case	Want	Got	Result	Detail
`genuine_receipt_verifies`	ok	ok	held	valid
`flipped_decision_rejected`	refused	refused	held	valid=False
`other_action_hash_rejected`	refused	refused	held	valid=False
`checks_list_trimmed_rejected`	refused	refused	held	valid=False
`extra_field_rejected`	refused	refused	held	valid=False
`key_order_and_whitespace_irrelevant`	ok	ok	held	valid=True
`embedded_attacker_key_ignored`	refused	refused	held	valid=False
`recorder_seal_not_accepted_as_receipt`	refused	accepted	failed	seal verifies as a decision receipt: valid=True
`receipt_without_decision_refused`	refused	accepted	failed	decision field present=False valid=True
`receipt_names_its_key_id`	ok	broken	failed	fields: ['action_sha256', 'at', 'checks', 'decision', 'engine_version', 'finding
`receipt_as_approval_token_refused`	refused	refused	held	approval token expired
`approval_token_other_action_refused`	refused	refused	held	approval token covers a different action
`approval_token_other_workspace_refused`	refused	refused	held	approval token covers a different action
`approval_token_expired_refused`	refused	refused	held	approval token expired
`surfguard_token_not_codeguard_approval`	refused	refused	held	approval token covers a different action
`approval_token_single_use`	refused	refused	held	first=DENY second=DENY (an approval for a destructive command should not run twi
`offline_verifier_script_verifies`	ok	ok	held	ok
`browser_style_ascii_escapes_still_verify`	ok	ok	held	valid=True

Raw data: receipts-evolution-2026-11-02.json · receipts-blind-2026-11-02.json. Our own runs; no independent test.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.