CAIN-42 MCPGateMemory Authority Firewall: figures & benchmarks
Evidence for Memory Authority Firewall: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist
Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.
6/6
claims matched when recorded
6
attack cases refused or flagged as claimed
70 ms
median round trip (min 58, max 257), incl. network
| # | Kind | Claim | Recorded value | HTTP | ms |
|---|---|---|---|---|---|
| C01 | attack | A planted 'already approved' note -> Tainted, dropped from recall, can never become a permission. | "TAINTED_FORGED_REASONING" | 200 | 67 |
| C02 | attack | An agent tries to write a policy into memory -> Agents cannot write rules, instructions or credentials. | "BLOCKED_AUTHORITY_FORGERY" | 200 | 257 |
| C03 | attack | A live API key written into memory -> 13 known secret formats refused, even split by invisible characters. | "BLOCKED_RAW_SECRET_EXPOSURE" | 200 | 71 |
| C04 | attack | A revoked permission comes back from memory -> Revoked stays revoked. | "BLOCKED_DEAD_AUTHORITY_RESURRECTION" | 200 | 70 |
| C05 | attack | One customer reads another customer's memory -> Tenants are isolated. | "BLOCKED_CROSS_TENANT_ACCESS" | 200 | 58 |
| C06 | attack | Summarising memories to gain authority -> Summaries can only narrow, never add authority. | "CONSOLIDATION_ONLY_NARROWED" | 200 | 67 |
Copy the table (paste into a spreadsheet)
id kind claim recorded_value expected http ms recorded_at C01 attack A planted 'already approved' note -> Tainted, dropped from recall, can never become a permission. "TAINTED_FORGED_REASONING" ["TAINTED_FORGED_REASONING"] 200 67 2026-11-03T22:52:09+00:00 C02 attack An agent tries to write a policy into memory -> Agents cannot write rules, instructions or credentials. "BLOCKED_AUTHORITY_FORGERY" ["BLOCKED_AUTHORITY_FORGERY"] 200 257 2026-11-03T22:52:10+00:00 C03 attack A live API key written into memory -> 13 known secret formats refused, even split by invisible characters. "BLOCKED_RAW_SECRET_EXPOSURE" ["BLOCKED_RAW_SECRET_EXPOSURE"] 200 71 2026-11-03T22:52:10+00:00 C04 attack A revoked permission comes back from memory -> Revoked stays revoked. "BLOCKED_DEAD_AUTHORITY_RESURRECTION" ["BLOCKED_DEAD_AUTHORITY_RESURRECTION"] 200 70 2026-11-03T22:52:11+00:00 C05 attack One customer reads another customer's memory -> Tenants are isolated. "BLOCKED_CROSS_TENANT_ACCESS" ["BLOCKED_CROSS_TENANT_ACCESS"] 200 58 2026-11-03T22:52:11+00:00 C06 attack Summarising memories to gain authority -> Summaries can only narrow, never add authority. "CONSOLIDATION_ONLY_NARROWED" ["CONSOLIDATION_ONLY_NARROWED"] 200 67 2026-11-03T22:52:12+00:00
Download: figures.tsv · transcript.json (full answers) · whole kit
How to read these numbers
- Recorded 2026-11-03T22:52:12+00:00 against cainstudio.online from our build host; times include the internet round trip.
- They show these inputs, not every possible input. Known misses are on the limits page.
- This is not a load test, an SLA or a third-party benchmark. Re-run it yourself:
python3 verify.py --live.