Cards at work · customer support

Let the agent finish the routine work.

Support agents already research the case. Give one agent separate cards for refunds, credits, and plan changes so routine requests can move immediately while exceptions still reach a person.

Issue a card →See the verified run ↓
support-agentone named holder
REFUND CARDRefund paid orders€5,000 starting daily ceiling
STORE CREDIT CARDResolve eligible saves€2,000 daily ceiling
PLAN CHANGE CARDChange active plans40 changes per day

Three jobs. Three balances. Revoke one without stopping the others.

Without cardsThe agent prepares the answer. A person re-reads the case and clicks.
With KIFF CardsRoutine requests can be authorized immediately. Exceptions still reach a person.

01 · verified on production · 21 Sep 2026

Refund Card

verified run
THE JOB

Refund an eligible paid order

The domain decides whether the order and action are valid. The card adds a daily authority ceiling for this holder.

THE CARD

REFUND_ORDER

Paid or partially refunded orders. €5,000 starting daily ceiling, raised once by the owner to €8,000.

WHAT MOVES

Routine authorizations leave the queue

Three requests were authorized against the card. The caller's system can continue its refund flow without another pre-approval.

WHAT STOPS

Missing, oversized, and revoked authority

No card, a request larger than the remaining balance, and a revoked card were all refused before the caller ran the action.

The recorded result

7 decisions

3 authorized · 4 blocked · 7 signed receipts

Drawn
€6,000 across three authorizations
Ceiling
€5,000 → €8,000, two attributed revisions
Remaining
€2,000 when the card was revoked
Refusals
no_mandate_issued, twice mandate_limit_reached, then mandate_expired
  1. 01No card€3,000 refused
  2. 02Issued€5,000 ceiling
  3. 03Drawn€3,000 authorized
  4. 04Too large€2,500 refused with €2,000 left
  5. 05Exact fit€2,000 authorized
  6. 06Exhausted€500 refused
  7. 07Raised€8,000 ceiling
  8. 08Drawn€1,000 authorized
  9. 09Revokedowner takes it back
  10. 10Stoppednext €500 refused

What KIFF verified: the decisions and authority draws. “Authorized” does not mean “executed”; the customer's system runs the action afterwards and does not report execution back to KIFF.

The rest of the portfolio

Separate authority for separate jobs.

illustrative

Store Credit Card

Resolve an eligible retention case while the customer is still there.

May do
ISSUE_STORE_CREDIT
Only when
the case is eligible
Up to
€2,000 per day

Exceptions still reach a person. This card gets a verified label only after its own production run.

illustrative

Plan Change Card

Finish routine subscription changes outside office hours.

May do
CHANGE_PLAN
Only when
the subscription is active
Up to
40 changes per day

Its count is independent of refunds and credits. This card gets a verified label only after its own production run.

Why three cards

Change refund authority without stopping plan changes.

Each card has one holder, one domain, its own balance, revision history, and revocation. A single broad pool would couple unrelated work and hide which authority changed.

Under every card

Domain evidence

The card narrows authority. The domain still decides whether the action, state, permissions, and parameters are valid. These six runnable proofs show that state machine; they are not card evidence.