CAIN-42 MCPGatecain_audit deliverables: figures & benchmarks
Evidence for cain_audit deliverables: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist
Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.
3/3
claims matched when recorded
2
attack cases refused or flagged as claimed
64 ms
median round trip (min 61, max 96), incl. network
| # | Kind | Claim | Recorded value | HTTP | ms |
|---|---|---|---|---|---|
| C01 | control | Your code: honest constant-time compare -> Real code must grade REAL or nobody trusts the alarms. | "REAL" | 200 | 64 |
| C02 | attack | Your code: verify() that always says yes -> A security check that cannot fail is fabrication. | "PARTIAL" | 200 | 61 |
| C03 | attack | Your tool: description tells the model to exfiltrate -> Tool poisoning: instructions hidden where only the model reads. | "high" | 200 | 96 |
Copy the table (paste into a spreadsheet)
id kind claim recorded_value expected http ms recorded_at C01 control Your code: honest constant-time compare -> Real code must grade REAL or nobody trusts the alarms. "REAL" ["REAL"] 200 64 2026-11-03T22:46:08+00:00 C02 attack Your code: verify() that always says yes -> A security check that cannot fail is fabrication. "PARTIAL" ["STUB", "PARTIAL"] 200 61 2026-11-03T22:46:09+00:00 C03 attack Your tool: description tells the model to exfiltrate -> Tool poisoning: instructions hidden where only the model reads. "high" ["high", "critical"] 200 96 2026-11-03T22:46:10+00:00
Download: figures.tsv · transcript.json (full answers) · whole kit
How to read these numbers
- Recorded 2026-11-03T22:46:10+00:00 against cainstudio.online from our build host; times include the internet round trip.
- They show these inputs, not every possible input. Known misses are on the limits page.
- This is not a load test, an SLA or a third-party benchmark. Re-run it yourself:
python3 verify.py --live.