Limits
| Limit |
|---|
| self-run, no independent review |
| word lists: a buy button in a language not listed, with a meaningful label, on a page whose address says nothing, can still pass |
| it reviews the plan, not the live page DOM; a page can relabel a button after the plan is approved |
| AI hardening needs Claude credit; scan and prove are free |
| gateway rolling deploy (the /surfguard-keystone routes import keystone/surfguard.py) |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.