CAIN-42 CAIN StudioWhat it gates
| Step | Without a CAIN approval |
|---|---|
| Payment, transfer, purchase (in 10 languages; Chinese, Japanese and Korean by substring) | CRITICAL |
| Deletion, purge, "permanently remove" | CRITICAL |
| Changing sign-in email, password, recovery, 2FA, owner or admin | CRITICAL |
| Approving an OAuth consent screen | CRITICAL |
| Running page script | HIGH, CRITICAL if it can submit, read cookies or send data |
| Typing a credential on a site outside the plan's origins | CRITICAL |
| An action SURFGUARD does not know | MEDIUM: unknown is not safe |
New today: a click is read on the page it happens on. An id-only button or a plain "Continue" on a payment page is a payment; the same click on a product list is not.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.