CAIN-42 CAIN StudioCanonicalization
| Name | What the gate does first |
|---|---|
decode | Percent-decode path and URL arguments until stable (at most 4 rounds) |
unicode | NFKC; tag characters read as the ASCII they hide; every invisible format character removed (since 2026-11-02, all of them, not six) |
path | Backslashes to /, cut at NUL, resolve ../, and since 2026-11-02 /proc/self/root and friends |
url | Match on parsed scheme, host, port and path; since 2026-11-02 an IP address has one spelling |
shell | Match each command segment after quote removal; refuse substitution in allow rules, and since 2026-11-02 treat it as denied in deny rules |
sql | Remove comments (but keep MySQL's executable /*!..*/ since 2026-11-02), collapse whitespace, ignore case |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.