CAIN-42 MCPGateAttack lab
Each button signs a $100 wire instruction live, then verifies the record you choose against that signature.
2 attacks 1 controls live: nothing pre-recorded
- Pick a preset. Red ones are attacks, green ones are honest requests that must still work.
- Tamper. Choose any field and drop it, null it, change its type, upper-case it, flip one character, or add a field the product never asked for.
- Send and read the real reply, or run every preset and watch the scoreboard fill.
What each preset tests
| Preset | Route | Why it matters | |
|---|---|---|---|
| control | Verify the original $100 instruction | POST /fabric/pqc/sign-hybrid → POST /fabric/pqc/verify-hybrid | Both signatures verify. |
| attack | Change the amount to $999,999 | POST /fabric/pqc/sign-hybrid → POST /fabric/pqc/verify-hybrid | Rejected: the record was changed. |
| attack | Add a different recipient | POST /fabric/pqc/sign-hybrid → POST /fabric/pqc/verify-hybrid | Rejected: an added field is a change too. |
Each button runs two live calls (sign, then verify). Software keys; no hardware security module.
FIRME AI CORPORATION · CAIN-42 is a Byzantine trust fabric. Numbers marked "our own check" were run by us, not by an independent party. Nothing on these pages is a certification.