CAIN-42 CAIN StudioLimits
| Limit | Why it matters |
|---|---|
| It only knows the families it generates | Today's blind set proved it: 12 of 12 outside tricks got through. A PATCHED verdict is not "safe" |
| It models how tools read arguments, not the tools themselves | Symlinks, a server that decodes three times, or a shell with odd options can still differ |
| Regex rules cannot be synthesized | Give a must-allow example, or that rule is skipped (the result says so) |
| The SQL model is MySQL/PostgreSQL-flavoured | Dynamic SQL (EXEC of a built string) is not modelled |
| Our own testing | No independent review |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.