API
| Route | What it does |
|---|---|
GET /redteam-keystone/samples | 5 ready-made policies and the canonicalizations |
POST /redteam-keystone/check | {"policy","must_allow","must_deny"} → attacks, patch, verdict |
POST /redteam-keystone/attest | The same, proved by the clean-room implementation and signed |
POST /redteam-keystone/gate | {"policy","call"} → what the gate decides and what the tool would read |
POST /redteam-keystone/verify, GET /records/{id}, /bundle/{id}, /chain | Records and verification |
Rules: {"id","effect":"allow"|"deny","tool","args":{arg:{"kind":"path|url|cmd|sql|text", op: operand}}},
ops prefix, equals, contains, regex, in, host_in.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.