SWARM KEYSTONE: prove the multi-agent fix only took power away

In a swarm, the web-scraping agent can ask the treasury agent to wire money. SWARM KEYSTONE reads the delegation graph and the messages, finds cycles, authority laundering (direct, transitive, peer-to-peer and by message) and injected instructions, then lets Claude propose a safer graph. It signs that graph only when a deterministic proof holds: no cycles, every hand-off attenuates authority, and, since today, the fix removed authority and kept everything that was not broken.

#23 of the CAIN-42 Top 25 7 gaps found and fixed today LIVE since 2026-11-02 18:56Z (gateway deploy), checked on both instances

5/14

held on today's blind set before any change (corrected tally)

13/14

hold on the fixed engine; 1 left as designed (negative authority), see Evidence

new agents, tools or edges a "fix" may add

models in the verdict (Claude only proposes)

Try it

The homepage section SWARM KEYSTONE scans the bundled samples live. Or:

curl -s -X POST https://cainstudio.online/swarm-keystone/scan-swarm -H 'Content-Type: application/json' -d '{"swarm":
 {"agents":[{"agent_id":"web","authority_level":1,"allowed_tools":["web_search"]},
            {"agent_id":"treasury","authority_level":5,"allowed_tools":["wire_transfer"]}],
  "delegation_edges":[{"from_agent":"web","to_agent":"treasury","requested_tools":["wire_transfer"]}],"messages":[]}}'

How it works · The proof · Evidence

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.