Limits
| Limit | Why it matters |
|---|---|
| A small subset | No loops, lists, strings, floats or calls: most real functions are refused |
| The proof is about the contract you wrote | A weak postcondition gives a weak proof |
| Z3 can time out | Then the answer is "could not decide", never a pass |
| The fuzzer checks a grid, not all integers | It catches disagreements that show on small inputs |
| Our own testing | No independent reviewer has tried to break it yet |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.