KIFF doesn’t reach inside the agent.
We don’t touch the model, the prompts, or the reasoning. We sit on the one boundary that matters — between the agent and the consequential action — and check it against the current state of the thing it touches, before it runs.
the agent
opaque on purpose — we don’t look inside
→
KIFF
decide vs. state
→
money-moving
action
action
A harness around the action, not a rewrite of the agent. Five lines against the code Pete already has.