CAIN-42 CLAWXAttack lab
Six transfers on the public demo killswitch (an isolated copy; it never touches production).
3 attacks 3 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | 1 MB export at 3 a.m. | POST /api/v1/mcpgate/killswitch/simulate-exfiltration | Under the off-hours limit: allowed. |
| control | 4 MB export at 3 a.m. | POST /api/v1/mcpgate/killswitch/simulate-exfiltration | Still under 5 MB: allowed. |
| control | 10 MB export at 2 p.m. | POST /api/v1/mcpgate/killswitch/simulate-exfiltration | Daytime, under the 50 MB burst limit: allowed. |
| attack | 10 MB export at 3 a.m. | POST /api/v1/mcpgate/killswitch/simulate-exfiltration | Off-hours bulk export: tripped. |
| attack | 50 MB bulk export at 3 a.m. | POST /api/v1/mcpgate/killswitch/simulate-exfiltration | The classic overnight data grab: tripped. |
| attack | 60 MB burst in the afternoon | POST /api/v1/mcpgate/killswitch/simulate-exfiltration | Over the single-burst limit at any hour: tripped. |
The public demo uses an isolated killswitch and simulated times. Rate limited per address.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.