CAIN-42 CAIN StudioAttack lab
Draw a swarm as JSON. Add an edge, raise an authority level, close a loop.
4 attacks 2 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| attack | Sample swarm: Multi-Agent Collusion & Authority Laundering (LangGraph / CrewAI) | POST /swarm-keystone/scan | Delegation graphs checked for cycles and authority that grows along a chain. |
| attack | Sample swarm: Cyclic Multi-Agent Deadlock (AutoGen Swarm) | POST /swarm-keystone/scan | Delegation graphs checked for cycles and authority that grows along a chain. |
| control | Sample swarm: Clean Hierarchical Swarm with Monotonic Attenuation | POST /swarm-keystone/scan | Delegation graphs checked for cycles and authority that grows along a chain. |
| attack | Your swarm: web agent delegates wire_transfer upward | POST /swarm-keystone/scan-swarm | A low-authority agent cannot borrow a high-authority agent's tools. |
| attack | Your swarm: two agents delegate to each other | POST /swarm-keystone/scan-swarm | A delegation loop never terminates. |
| control | Your swarm: manager hands a subset down | POST /swarm-keystone/scan-swarm | Authority that only narrows is fine. |
Tamper with any field and send it again: a verifier must answer no, never crash or say yes. Public demo routes are rate limited per address; a 429 shows as rate limited. Our own lab; no independent test.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.