Limits
| Limit | Why it matters |
|---|---|
| It checks what you send it | Your client or gateway must call verify before each use (MCPGate can) |
| The poisoning screen is pattern-based | Paraphrases get through; its 0.21% false-alarm figure was tuned on the corpus it was measured on |
| It compares definitions, not behaviour | A server that keeps its description but changes what the tool does is not caught here |
| Live since 2026-11-02 18:49Z | health reports 1.1.0; the poisoning screen and drift checks were re-run live |
| Our own testing | No independent review |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.