KIFF doesn’t reach inside the agent.
We don’t touch the model, the prompts, or the reasoning. We sit on the one boundary that matters, between the agent and the consequential action, and check it against the current state of the thing it touches, before it runs.
the agent
opaque on purpose, we don’t look inside
→
KIFF
decide vs. state
→
money-moving
action
action
A harness around the action, not a rewrite of the agent. Five lines against the code Pete already has.