Bypass lab

Each box sends one rule (with every canonicalization switched on) and one bypass call to the live gate. The answer shows what the gate saw and what the tool would read.

Empty quotes inside the blocked command

Expected: 1.1.0: gate DENY (the tool reads 'curl'); 1.0.0: ALLOW

ANSI-C escapes

Expected: 1.1.0: DENY; 1.0.0: ALLOW

Command built at run time

Expected: 1.1.0: DENY (cannot be checked, so treated as denied); 1.0.0: ALLOW

Metadata IP as one decimal number

Expected: 1.1.0: DENY; 1.0.0: ALLOW

MySQL executable comment

Expected: 1.1.0: DENY; 1.0.0: ALLOW

Invisible separator in a prompt

Expected: 1.1.0: DENY; 1.0.0: ALLOW

/etc through procfs

Expected: 1.1.0: DENY; 1.0.0: ALLOW

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.