Anne gives him a way to say yes.
Pete's agentproposes a refund
→
KIFFstate · authority · total
→
client's code
executes if allowed
executes if allowed
The client defines the rule. KIFF applies it before execution: runtime authorization for the proposed action. A person still decides cases that require judgment. The client’s system, not KIFF, moves the money.