KEYSTONE CI: a signed verdict for every pull request, bound to the exact code

Coding agents open pull requests faster than people can read them, and the cheapest way for an agent to get to green is to weaken what checks it: skip the test, loosen the assertion, ignore the folder. KEYSTONE CI reads the diff with deterministic rules (no model in the verdict), returns PASS, REVIEW or BLOCK, and signs the result as an in-toto Statement in a DSSE envelope that names the diff's SHA-256 and the head commit. Anyone can re-check it offline.

#16 of the CAIN-42 Top 25 12 gaps found and fixed today engine 1.1.0 live after the next gateway deploy; offline verifier live now

15/27

held on today's blind set, before any change

27/27

hold on engine 1.1.0

verdicts changed on this repository's last 150 commits

models in the verdict

Try it

The attack lab runs 13 live cases from your browser. The homepage section KEYSTONE CI checks any public GitHub PR by URL. Or:

curl -s -X POST https://cainstudio.online/keystone-ci/scan -H 'Content-Type: application/json' \
  -d '{"sample_id":"agent-skips-tests"}'

The rules · The attestation · Verify offline · GitHub Action · Evidence

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.