CAIN-42 CAIN Studio2026-11-02 upgrade
| Gap | Before | After |
|---|---|---|
| CAINPay disguised merchants | 7 spellings of a blocked merchant approved (look-alike letters, 。, :443, %2e, punycode, /, #) | Merchant treated as a hostname; look-alikes folded on the deny side only; 14 tests |
CODEGUARD sh -c "$(curl …)" | REQUIRE_APPROVAL for a generic reason | DENY as remote code execution, same as curl | sh; 1.2.1, 280 tests |
| FairGate undefined ratio | "not flagged" when the privileged group had 0% favorable outcomes | Verdict UNDETERMINED, flagged for review (fail closed) |
| Stale status | The page never looked at the health reading's age | Check 1 requires a reading under 15 minutes old (live) |
| Everything self-served | No witness outside our servers | Check 11 ties the proof chain to Sigstore Rekor (live) |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.