CAIN-42 MCPGateA2A Guard: figures & benchmarks
Evidence for A2A Guard: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist
Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.
5/5
claims matched when recorded
4
attack cases refused or flagged as claimed
97 ms
median round trip (min 0, max 222), incl. network
| # | Kind | Claim | Recorded value | HTTP | ms |
|---|---|---|---|---|---|
| C01 | control | The original, untouched card verifies -> The registered card matches its signature. | true | 200 | 222 |
| C02 | attack | Copy with 'transfer_funds' added -> One added capability breaks the signature. | false | 200 | 0 |
| C03 | attack | Copy with 'wire_transfer_unlimited' added -> Same: rejected. | false | 200 | 97 |
| C04 | attack | Copy with 'delete_all_users' added -> Rejected. | false | 200 | 90 |
| C05 | attack | Even a harmless-sounding 'read_calendar' added -> Integrity is all-or-nothing: any edit fails, whether it looks dangerous or not. | false | 200 | 102 |
Copy the table (paste into a spreadsheet)
id kind claim recorded_value expected http ms recorded_at C01 control The original, untouched card verifies -> The registered card matches its signature. true [true] 200 222 2026-11-03T22:47:46+00:00 C02 attack Copy with 'transfer_funds' added -> One added capability breaks the signature. false [false] 200 0 2026-11-03T22:47:46+00:00 C03 attack Copy with 'wire_transfer_unlimited' added -> Same: rejected. false [false] 200 97 2026-11-03T22:47:47+00:00 C04 attack Copy with 'delete_all_users' added -> Rejected. false [false] 200 90 2026-11-03T22:47:48+00:00 C05 attack Even a harmless-sounding 'read_calendar' added -> Integrity is all-or-nothing: any edit fails, whether it looks dangerous or not. false [false] 200 102 2026-11-03T22:47:48+00:00
Download: figures.tsv · transcript.json (full answers) · whole kit
How to read these numbers
- Recorded 2026-11-03T22:47:49+00:00 against cainstudio.online from our build host; times include the internet round trip.
- They show these inputs, not every possible input. Known misses are on the limits page.
- This is not a load test, an SLA or a third-party benchmark. Re-run it yourself:
python3 verify.py --live.