CAIN Proof-Carrying Code: figures & benchmarks

Evidence for CAIN Proof-Carrying Code: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist

Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.

3/3

claims matched when recorded

attack cases refused or flagged as claimed

43 ms

median round trip (min 36, max 49), incl. network

#	Kind	Claim	Recorded value	HTTP	ms
C01	control	A pure function: add(a, b) -> Nothing dangerous.	`true`	200	49
C02	attack	import os; os.system('rm -rf /') -> Shell access refused.	`false`	200	43
C03	attack	A function that calls eval() -> Dynamic execution refused.	`false`	200	36

Copy the table (paste into a spreadsheet)

id	kind	claim	recorded_value	expected	http	ms	recorded_at
C01	control	A pure function: add(a, b) -> Nothing dangerous.	true	[true]	200	49	2026-11-03T22:54:29+00:00
C02	attack	import os; os.system('rm -rf /') -> Shell access refused.	false	[false]	200	43	2026-11-03T22:54:30+00:00
C03	attack	A function that calls eval() -> Dynamic execution refused.	false	[false]	200	36	2026-11-03T22:54:30+00:00

Download: figures.tsv · transcript.json (full answers) · whole kit

How to read these numbers

Recorded 2026-11-03T22:54:31+00:00 against cainstudio.online from our build host; times include the internet round trip.
They show these inputs, not every possible input. Known misses are on the limits page.
This is not a load test, an SLA or a third-party benchmark. Re-run it yourself: python3 verify.py --live.