CAIN-42 CAIN Studio2026-11-02 upgrade
- no exemption by skill name: a skill calling itself onepassword_vault or root_admin is checked like any other
- privilege tier normalised (case, spaces) and validated; unknown tiers refused
- shell / code-execution tools recognised by path, extension and interpreter name
- wildcard and sensitive memory regions flagged
- every text field of the manifest screened for injection
- prove(): no new tools, regions or higher tier; code cannot be emptied; functions the skill defined must still exist
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.