Limits

Limit	Why it matters
self-run, not independent
the page's CSP blocks calls to other domains, so the Rekor read is one click outside
the quorum receipt is not itself in Rekor
rule-based engines: a new trick may pass
Not a certification	No SOC 2, ISO or EU AI Act conformity; not a third-party audit; not a load test
Three fixes wait for deploys	deployed: CODEGUARD 1.2.1 (gateway 18:56Z), CAINPay image 19:03Z (live 11/11 spellings), FairGate 19:01Z (suite host)

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.