OPENAI WEBMCP CHALLENGE · SYNTHETIC DEMO
Agents can run the test.
They cannot grade themselves.
CUF lets a browser agent orchestrate authorization verification through structured WebMCP tools while a deterministic kernel — not the LLM — owns PASS / FAIL / INCONCLUSIVE.
01
Declared boundary
A Support actor in Tenant A may read Tenant A tickets and must never read Tenant B tickets.
SUPPORT
Tenant A
Tenant A
→
Tenant ATKT-A-1042
ALLOW→
Tenant BTKT-B-9001
DENY02
Kernel verdict
NOT RUN
FAILany proven mismatch
INCONCLUSIVEerror / missing evidence
PASSall observed matches
03
Observed evidence
04
Human + agent activity
Ask ChatGPT in the in-app browser: “Use this page's CUF tools to verify the tenant boundary, then show me the evidence.”
cuf_list_cases
cuf_run_case
cuf_get_latest_verdict
cuf_get_evidence
cuf_export_seal