The evidence is the proof the boundary ran.

For every decision, KIFF emits a signed record: what was proposed, the state it was checked against, the decision, and the policy that produced it — produced at the moment of the decision, not reconstructed later. It is a protocol output, not the thing you buy: strong proof for an auditor, a regulator, or a cyber-insurer that the runtime decided before execution. What you buy is the reusable operational foundation and the Cloud that operates it.