cainstudio.online · FIRME AI CORPORATION
CAIN-42 is a Byzantine trust fabric: no agent, node or wrapper may vouch for itself. This page runs 11 live checks from your browser against the production endpoints. Nothing here is pre-recorded and no number is typed in by hand: every result comes from the response you just received. Open DevTools → Network and watch.
Around 45 small requests in total. Please don't loop it; these are shared production hosts.
Check 2 sends a real notarization receipt (sequence 360157, cluster cain-mr-02) to our server. You don't have to trust our server: the standalone verifier below imports no CAIN code and checks the Ed25519 signatures of 3 of 4 replicas itself.
mkdir cain-verify && cd cain-verify curl -s https://cainstudio.online/verify-yourself-receipt.json -o receipt.json curl -sO https://cainstudio.online/verify_qaas_receipt.py curl -sO https://cainstudio.online/verify_pbft_qc_bundle.py pip install cryptography PIN=$(curl -s https://cainstudio.online/api/v1/quorum/status | python3 -c "import json,sys;print(json.load(sys.stdin)['configuration_hash'])") python3 verify_qaas_receipt.py receipt.json --pin $PIN # expected last line: NOTARIZED # now change one character in receipt.json and run it again: it must not say NOTARIZED
Before you trust the pin, compare it with the one we post on LinkedIn, or message us for it. Checking the key out-of-band is part of the test.
| Bounty | What counts |
|---|---|
| $200 | The hard ones. A receipt you crafted that our offline verifier or /api/v1/quorum/verify reports as NOTARIZED for a digest the cluster never notarized (checks 1–4), or an input that makes a fail-closed endpoint (check 6) say yes when it should say no. |
| $100 | A reproducible defeat of any other claim on this page: a destructive command CODEGUARD allows, a merchant spelling CAINPay approves, a cross-tenant read in AETHER-33, a wrong answer from the math checks, or a private AuditLattice read. |
Rules: the first confirmed report for each check is paid. Send the exact input plus the response to security@cainstudio.online. No load testing, no fuzzing at volume, no denial of service. Report privately first; we publish confirmed findings and the fix with your name, if you want it there.
These checks prove specific, narrow claims about live behaviour. They are not a certification (no SOC 2, ISO or EU AI Act conformity), not a third-party audit, and not a load test. The consensus cluster notarizes evidence; it does not make an unauthorized action authorized. CODEGUARD and CAINPay are rule-based, so a new trick may get past them; that is what the $100 bounty is for. Results are as of the timestamp shown when you run them.
FIRME AI CORPORATION · California · built by Vincent Noriega, Lena Noriega and Monica Diaz.
CAIN-42 CAIN Studio