2026-11-02 upgrade
The 10-27 audit said what the Launchpad verifier still accepts. Today we measured whether that is still true for all three verifiers, and published the tool so you can measure it too.
- New: nullius-sweep.py: downloads the release, refuses to run a verifier that does
not match SHA256SUMS, edits every field of the samples one at a time, and writes every accepted path to
sweep.json. - Result: 2,319 edits; 2,274 refused; 45 accepted, every one in a class the README already listed; 0 crashes.
- Threshold checks for the witness quorum: two broken statements refused in all 6 pairs; duplicates count once.
- Import audit: all three use only the standard library and
cryptography; no network calls. - Browser demo: hash the release in your own browser.
What would make it stronger next (plans)
- Publish more of the 18 verifiers (owner decision).
- Keys published through a second, independent channel (for example a transparency log).
- Multi-field and structural mutation sweeps.
- An independent engineer re-running the sweep and publishing the result.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.