CAIN-42 MCPGateAGENTIC AI 75 · #28
Cross-application mobile task execution
Gemini task automation operated supported Android apps through a restricted virtual window.
Last reviewed 2026-11-11
Agentic AI 75 / #28
2026 status: Beta announcement · Category: Mobile agents
The 2026 development
Gemini task automation operated supported Android apps through a restricted virtual window.
The governance gap
A mobile agent sees personal and work data in the same session. App-level permissions do not express the intent boundary, and a virtual window is only a boundary if the action layer enforces it.
Where CAIN-42 fits: Moat 5 — Predictive Trust & Blast Radius
Core question: What could happen before we let it happen? Pre-execution analysis of reach, exposure and consequence, including simulations.
Evaluate the destination app, the data being read and the action being taken before the tap. CAIN's browser-agent firewall scores blast radius per action and can refuse a cross-app transfer that exceeds the declared intent.
How the wiring works
- Declare the task's allowed apps, data classes and destinations.
- Classify each proposed action and its blast radius before execution.
- Refuse reads or writes outside the declaration, including clipboard and share intents.
- Record the action and the observed screen state as evidence.
What is real today
LIVE A public route in this deployment exercises this mechanism today, within its stated scope.
The hosted firewall demo evaluates fixed browser-agent presets. It does not operate Android, Gemini or a real device.
| Component in this repository | What the module says it is |
|---|---|
cain/browser/agent_firewall.py | Browser Agent Action Firewall. |
cain/argus/envelope.py | CAIN ARGUS — Behavioral Authority Envelope (Prompt 14, section 6). |
cain/argus/path.py | CAIN ARGUS — execution-path assurance (Prompt 14, section 7). |
Descriptions are the first line of each module's own docstring, read without importing it. A module path is a pointer into this repository, not a hosted endpoint. Its existence is checked by the test suite; its status for this use is the label above.
Check it yourself
- Run the live browser-agent blast-radius demo
/api/v1/browser-agent-firewall/presets - Fire a live decision through the CAIN-42 pipeline
/fabric/try— the same enforcement path every product sits behind.
Commercial package
| Offer | Mobile Agent Action Review |
|---|---|
| Buyer | Mobile-platform and app vendors |
| Price (proposal) | $3,500–$7,500 per review |
| Bundle | Commerce & Payments — Delegated spending with a ceiling and a receipt. |
| Operator stream | Stream 2 of the 10-stream operator playbook |
Fintech, commerce platforms, marketplaces, treasury teams is the bundle buyer. The entry offer for this bundle is Payment-mandate review; browser-agent checkout review; the range is $2,500–$7,500 per review; integration from $10,000. A price on this page is a proposal, not a validated rate, and no customer is claimed.
Buy this as a product or service
CAIN-A75-028 — Mobile Agent Action Review DELIVERABLE
A bounded engine run on the buyer's sample: findings, a written report, and a SHA-256 artifact manifest. The manifest is unsigned: it is not a signature and not an attestation.
Kind: Assessment · Price (proposal): $3,500–$7,500 per review · Lead time: 5 business days.
Open the product page · all 75 products
What this page does not claim
What this page is not. CAIN-42 is not affiliated with, endorsed by, integrated into, or shipped with the organisation named in the 2026 item. The item is public context; the page describes how CAIN-42 would govern that class of capability. No page here claims a customer, a partnership, a certification, a patent, or a production integration. Prices are proposals. Built by a three-person team.