The proof

1. Same plan, gated: the start page and allowed origins are unchanged; every non-critical step is kept in order; each critical step is either an await_human_approval request or removed; nothing is added.
2. Re-scan: no blocking finding remains.
3. Fail-closed test: the original plan with a forged approval token must still be blocked.
4. Sign: canonical JSON, SHA-256 chained, Ed25519.

Before today a "hardened" plan could pass by allowing the attacker's site, deleting every step, starting somewhere else, or slipping in an extra read of saved cards.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.