proof · synthetic test run · 22 Sep 2026

Run on the live service. Not a mockup.

A refunds agent on a real KIFF Card: refunds allowed, refused, the limit raised, the card revoked. A synthetic test run on KIFF’s production services, with no customer data. Recorded in the product, 1 min 30 s.

app.kiff.dev · refund card run
decisions7
allowed3
refused4

7 signed receipts. KIFF verified the decisions and what they used from the card. “Allowed” is not “executed”: the company’s own system runs the refund.

the run, step by step

Ten moments. One card.

refund card · REFUND_ORDER · paid orders
  • 01No card yet: €3,000 refused
  • 02Owner issues the card: €5,000 a day
  • 03€3,000 allowed
  • 04€2,500 with €2,000 left: refused
  • 05€2,000, exact fit: allowed
  • 06€500 with nothing left: refused
  • 07Owner raises the limit to €8,000
  • 08€1,000 allowed
  • 09Owner revokes the card
  • 10Next €500: refused

Refusals recorded: no card issued, limit reached twice, then card revoked. Both changes to the card were saved with who made them.

more to watch

Agents at work. The product up close.

mcp-from-zero-en

Your agent can act. You decide how far.

English · Download: 360p · 480p · 540p · 720p · Subtitles

In this clip

English narration and real Codex MCP calls: connect a server, configure its tools, issue Cards and configure the agent key off camera. A €20 refund runs within a €50 limit; an €80 request waits for the owner and runs only after approval and a retry of the same operation. Lower the Card to €10, then watch a new €20 request wait. KIFF production gateway, Stripe test mode only. Setup footage reused from the French recording; new calls, approval and Card update recorded 6 October 2026.

mcp-from-zero-fr

Votre agent agit. Vous fixez les limites.

Français · Download: 360p · 480p · 540p · 720p · Subtitles

In this clip

French narration and real Codex MCP calls: connect the server and tools, issue Cards and configure the agent key off camera. A €20 refund runs; an €80 request waits for approval. The approved result is re-read with the same operation ID after its first execution was missed by the recording; Stripe confirms no duplicate refund. Lower the Card from €50 to €10, then watch a new €20 request wait. KIFF production gateway, Stripe test mode only; recorded 6 October 2026.

refunds-through-kiff

A support agent refunds on its own, and the big one waits for you

In this clip

A support operator asks an Agno agent (Claude on Amazon Bedrock) to process refunds. Its tools reach Stripe (test mode) only through the KIFF MCP gateway. A €24 refund is inside its Card and goes through; an €86 refund is over the €50 limit, so KIFF holds it and nothing reaches Stripe. The owner approves it in KIFF, and the agent, which was waiting in the same conversation, finishes the refund once. Then the Card's record and the agent's page. Real model, real gateway, Stripe test mode; recorded 2 October 2026.

prod-guardian

An AI agent works a live production incident

In this clip

The on-call agent rolls back a bad deploy (allowed), a region failover is held for a human to approve, and "drop the database" is refused outright, each decided against the service's live state, every one on the record.

agent-scan-cloud

See what an agent can reach, then watch KIFF hold the line

In this clip

A scan surfaces every action the agent's code can reach, then live: the safe fix runs, a high-blast-radius action waits for a human, and a schema migration mid-incident is blocked, the move that has wiped live databases this year.

connect-agent

Bring an agent you already run under KIFF

In this clip

From the Runtimes page: mint a key, drop in the language-agnostic call, and the agent shows up as a connected, governed runtime, with the open-source adapters on GitHub.

build

Author a governed domain from your rules

In this clip

Using the kiff-domains skill so your coding agent writes the kiff.yaml, then validating and activating a real refunds domain in the dashboard.

govern

The control room: every decision in one place

In this clip

The Govern view: decision counts by outcome and a state-aware decisions table where a refusal reads as decided against the entity's real state, ending on a signed receipt.

activity-evidence

"What did the agent do?", answered with proof

In this clip

The per-domain activity trail and a signed, tamper-evident receipt: the action, the state it was checked against, and the verdict, recorded before anything ran.

under every card

Domain proofs. Run them yourself.

A card narrows authority; the domain still decides whether the action is valid for the entity’s state. These runnable proofs show that state machine. They are not card evidence.

Run the domain proofs, kiff-guard on GitHub ↗

short films · under one minute

One minute. The whole picture.

An illustrated customer-support scenario: connected tools, one agent’s Card, and the paths a request can take. Watch the portrait version on your phone or use the landscape version in a presentation. These films explain the flow; the recordings above show real MCP calls.

Explore the interactive version →

English · 58s · Portrait · 1080 × 1920

Your agent handles the work. You keep control.

Connect your tools, give the agent a Card, and let routine credits through while larger requests wait for you. The whole flow in 58 seconds, made for your phone.

Download MP4 · Subtitles

In this capsule

Illustrated customer-support scenario with English narration: a €500 per-credit limit and €3,000 daily budget; €180 allowed, €1,400 held, a payment-terms change refused, and one-time approval without raising the limit. Fictional customers and amounts, no live tool calls. KIFF must be the agent’s only route to the protected tools. See the longer recordings above for real MCP calls.

English · 58s · Landscape · 1920 × 1080

The whole system, in one picture.

Follow the tools, the agent’s Card and the three decision paths in a 58-second narrated map. The landscape version for presentations and larger screens.

Download MP4 · Subtitles

In this capsule

The same fictional customer-support scenario as the portrait film, with the isometric map leading the narration. €180 allowed, €1,400 held, a payment-terms change refused, then one-time approval. No live tool calls; real MCP evidence remains in the longer recordings above. KIFF must be the agent’s only route to the protected tools.

Run it on your own agent.

Issue your first card Get it live with us