CAIN-42 CAIN StudioGitHub Action
/keystone-ci/action.yml is a complete workflow: it fetches the PR diff with
the job's own read-only token, sends it to /keystone-ci/check, prints the findings as annotations, links
the signed record and its badge, and fails on BLOCK. Permissions: contents: read,
pull-requests: read. The diff is not stored; the signed verdict and findings are.
Each run has a record at /keystone-ci/attestations/<run_id>, a re-verification at
/keystone-ci/verify/<run_id> (record hash, signature, chain link) and a badge at
/keystone-ci/badge/<run_id>.svg. The whole ledger downloads as an evidence bundle from
/keystone-ci/bundle.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.