How it works

1. Detect (deterministic). Delegation cycles; undeclared agents; unscoped hand-offs; a lower agent steering a higher one into tools it lacks, directly or through intermediaries; a delegator handing on a tool it does not hold; a lower agent asking a higher one for a privileged tool by message with no delegation edge; injected instructions in any string field of edges, messages or agent definitions.
2. Act. Claude Opus 5.5 proposes a hardened graph. The swarm is passed as data, not instructions.
3. Prove (deterministic). Re-scan to zero blocking findings; a cycle-free graph; every edge requests only tools both agents hold; and the non-expansion rules below.
4. Sign. Canonical JSON, SHA-256 chained, Ed25519-signed; the bundle verifies offline.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.