Six real agents on the routes that move money.
Four flows you can now ship — a real agent does the revenue work, live on Bedrock — and two where the boundary simply holds the line. Every card is a runnable proof: real agent, real framework, real terminal output. The first four are live in the browser.
Refund agent, under attack
manipulated→held
A customer talks it into a 2nd refund — then a credit. Both declined.
Agno · Bedrock · live
Close deals with a discount
human gate→shipped
The agent applies the closing discount — once.
Agno · Bedrock · live
Recover failed payments
batch queue→live
A dunning agent charges once to recover — never hammers the card.
Agno · Bedrock · live
Ship instant payouts
review gate→instant
Disburse the moment escrow clears — exactly once.
Agno · Bedrock · live
Duplicate payment
$100,000→$10,000
AP agent retries a $10K payment 10×. The boundary holds.
OpenClaw
Collections contact
5 contacts→1
Contact after a promise to pay. The boundary holds.
Agno · FDCPA / CONC
The four enablement flows are live in the browser at kiff.dev/spot — switch recipes, run a real agent, watch the boundary hold. The finance wedge is the entry scenario, not the boundary of the platform — any domain whose actions map to a state machine fits the same loop.