Limits

Limit	Why it matters	Status
Unpinned verification proves nothing	Anyone can build a self-consistent receipt with four keys of their own	CLI refuses without a pin (live); server pins by default (deploy pending)
Seconds, not milliseconds	2.6 s per digest: fine for evidence, wrong for a request hot path	Inherent to one consensus round per call
One cloud provider	Four regions, one company: not independent operators	Open
All validators are operated by us	Byzantine tolerance protects against a faulty node, not against the operator of all four	Open: independent validators would fix it
No passed 72-hour soak	Long-run stability is not demonstrated	Open
Health flaps	A degraded cluster has no fault margin	Open
Time is not certified	`issued_at` is the gateway's word	Inherent; use an RFC 3161 timestamp if you need one
No published price, no SLA	Not yet a commercial service with guarantees	Open
No independent review	Every test here is ours	A paid independent review is planned

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.