CAIN-42 CAIN StudioSURFGUARD KEYSTONE: a browser agent cannot pay, delete or hand over an account without a person
Browser agents click and type for you. SURFGUARD reads the plan first, step by step, on the page each step happens on. Payments, deletions, changes to who controls an account, OAuth consent and page scripts are stopped unless a person approved that exact plan, with a token CAIN signs and the model never holds. When Claude proposes a safer plan, it is signed only if the risky steps became approval requests and nothing else changed.
#19 of the CAIN-42 Top 25 8 gaps found and fixed today live after the next gateway deploy
held on today's blind set, before any change
hold on the fixed engine
false alarms on 7 ordinary browsing plans
approvals the model can issue itself
Try it
The homepage section KEYSTONE family scans the bundled plans live. Or:
curl -s -X POST https://cainstudio.online/surfguard-keystone/scan-plan -H 'Content-Type: application/json' -d '{"plan":
{"target_url":"https://shop.example/checkout/payment","steps":[{"action":"click","target":"text=Continue"}]}}'
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.