Limits

What it does not do. Say these plainly if a buyer asks.

• SPIFFE-style names only; it does not issue SPIFFE SVIDs.
• It governs actions that ask it for a token; a tool reachable without a token is not covered.
• Keys are the agents' own; protecting an agent's private key is the operator's job.
• Our own testing; no independent review or third-party audit.
• Not a certification.

FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.