CAIN-42 CAIN StudioThe checks
| Check | Severity |
|---|---|
| An import the supply-chain guard refuses (invented names, typosquats, known-bad), including names loaded at run time with importlib or __import__ | CRITICAL |
| A module imported by a name computed at run time | MEDIUM |
Swallowed errors: except: pass, broad except Exception: continue, contextlib.suppress(Exception) | HIGH |
| Random numbers returned where a computed value is claimed (aliases followed) | HIGH |
| SQL/command/code injection, hard-coded secrets, TLS off, unsafe deserialization, unverified JWTs, fail-open authorization, weak hashing for secrets, debug servers, path traversal | per rule |
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.