CAIN-42 MCPGateAGENTIC AI 75 · #18
Full-stack agent safety infrastructure
NVIDIA announced a platform spanning agent security, governance, testing and deployment infrastructure.
Last reviewed 2026-11-11
Agentic AI 75 / #18
2026 status: Platform announcement · Category: Platform security
The 2026 development
NVIDIA announced a platform spanning agent security, governance, testing and deployment infrastructure.
The governance gap
A platform announcement defines a category, not a guarantee. Buyers still need to know which control is enforced in the data path, which is a dashboard, and what happens when the control is unavailable.
Where CAIN-42 fits: Moat 7 — Autonomous Trust Control Loop
Core question: Can verified experience change future trust? Monitor, detect, contain, recover, and re-authorise from observed outcomes.
CAIN's answer is a single decision path with fail-closed semantics: no authorization, no execution; unknown and error never become allow. The same path carries authority, risk, prediction, enforcement and evidence.
How the wiring works
- Put every agent action behind one enforcement boundary.
- Evaluate identity, authority, policy, risk and prediction in a fixed order.
- Fail closed on timeout, error or missing evidence.
- Emit a signed decision record before the tool is allowed to run.
What is real today
LIVE A public route in this deployment exercises this mechanism today, within its stated scope.
CAIN is not NVIDIA's platform and this page claims no partnership. The live decision path is CAIN's own; several adjacent engines remain prototypes.
| Component in this repository | What the module says it is |
|---|---|
cain/kernel.py | CAIN Trust Fabric - Kernel Interface & High-Level Execution Substrate |
cain/guard.py | CAIN Trust Fabric - Unified 1-Line Agent Guard Decorator |
cain/mcp_proxy.py | CAIN Trust Fabric - Universal MCP Transparent Interceptor & Proxy (Phase 2) |
platform-gateway/fabric_control_plane.py | CAIN TRUST FABRIC -- hosted control plane. |
Descriptions are the first line of each module's own docstring, read without importing it. A module path is a pointer into this repository, not a hosted endpoint. Its existence is checked by the test suite; its status for this use is the label above.
Check it yourself
- Fire a live decision through every stage
/fabric/try - Fire a live decision through the CAIN-42 pipeline
/fabric/try— the same enforcement path every product sits behind.
Commercial package
| Offer | Enterprise Agent Governance Review |
|---|---|
| Buyer | CISO and platform-security teams |
| Price (proposal) | $5,000–$12,000 per review; appliance from $50k/yr |
| Bundle | Runtime Containment & Evidence — Contain first, then prove what happened. |
| Operator stream | Stream 2 of the 10-stream operator playbook |
SOC, incident response, compliance, enterprise IT is the bundle buyer. The entry offer for this bundle is Runtime containment review; signed evidence pack; the range is $2,500–$5,000 per review; $2,000–$10,000 per evidence pack. A price on this page is a proposal, not a validated rate, and no customer is claimed.
Buy this as a product or service
CAIN-A75-018 — Enterprise Agent Governance Review DELIVERABLE
A bounded engine run on the buyer's sample: findings, a written report, and a SHA-256 artifact manifest. The manifest is unsigned: it is not a signature and not an attestation.
Kind: Assessment · Price (proposal): $5,000–$12,000 per review; appliance from $50k/yr · Lead time: 5 business days.
Open the product page · all 75 products
What this page does not claim
What this page is not. CAIN-42 is not affiliated with, endorsed by, integrated into, or shipped with the organisation named in the 2026 item. The item is public context; the page describes how CAIN-42 would govern that class of capability. No page here claims a customer, a partnership, a certification, a patent, or a production integration. Prices are proposals. Built by a three-person team.