A key reaches the tool. A card says how far.

	Key, limits in code	KIFF Card
Which actions	Anything the tool allows	Named actions only
How much	A counter in each agent	A ceiling, one balance per card
Who changes it	Pete, with a deploy	The owner, instantly